The Health Insurance Portability and Accountability Act (HIPAA) regulations, as amended by the Affordable Care Act (ACA), impact wellness programs that are part of a group health plan with respect to rewards offered for participating in the program. The regulations also have privacy provisions that must be followed.
The HIPAA/ACA rules allow employers to reward or penalize employees for meeting certain health goals (such as not smoking, or attaining a certain level of blood pressure), but there are strings attached. The company needs to keep penalties within certain limits. Penalties cannot be over 30 percent of the cost of coverage, or 50 percent of the cost of coverage if the penalty relates to smoking. Employers must also offer a reasonable alternative if an employee does not meet the requirements for a reward, and employees need to be allowed to qualify at least annually.
When do HIPAA regulations apply to a wellness program?
- HIPAA regulations apply to a wellness program when it is connected to a group health plan.
- Other federal and state laws may still apply to wellness programs NOT in connection with a group health plan.
The Health Insurance Portability and Accountability Act (HIPAA) privacy and security rules apply only to covered entities and business associates — and not to employers in their capacity as employers. Whether or not HIPAA applies to workplace wellness programs depends on the way in which a wellness program is structured.
Group health plan: Employers may offer a workplace wellness program as part of a group health plan for employees. For example, employers may offer certain incentives or rewards related to group health plan benefits, such as reductions in premiums or cost-sharing amounts, in exchange for participation in a wellness program.
When a workplace wellness program is offered as part of a group health plan, HIPAA non-discrimination regulations apply. In addition, the individually identifiable health information collected from or created about participants in the wellness program is protected health information (PHI) and is protected by the HIPAA rules.
Program offered directly: An employer may choose to offer a workplace wellness program directly to employees, and not in connection with a group health plan.
If a wellness program is totally disconnected from a health plan and is not itself a group health plan, the HIPAA wellness plan rules will not apply.
In addition, where a workplace wellness program is offered by an employer directly and not as part of a group health plan, the health information that is collected from employees by the employer is not protected by the HIPAA rules. However, other federal or state laws may apply and regulate the collection and/or use of the information.
How do HIPAA nondiscrimination provisions affect wellness plans?
- When a wellness program is connected to a group health plan, HIPAA’s nondiscrimination provisions apply.
- Employers may reward employees for wellness program participation but must follow certain rules.
- Whether or not a company wellness plan is participatory or health contingent changes how HIPAA affects it.
HIPAA nondiscrimination provisions generally prohibit plans from treating people differently based on a health factor, but they contain an exception for wellness programs. Under HIPAA, an employer may not charge similarly situated individuals different premiums or contributions based on a health factor. The regulations also generally prohibit plans from requiring similarly situated individuals to satisfy differing deductible, copayment, or other cost-sharing requirements. However, the HIPAA regulations provide an exception for wellness programs if certain conditions are met.
HIPPA provisions do not prevent a plan from offering a discount or rebate to employees who participate in a wellness program. A employer could also offer modified copayments or deductibles in return for adherence to wellness programs.
Thus, there is an exception to the general rule prohibiting discrimination based on a health factor if the reward, such as a premium discount or waiver of a cost-sharing requirement, is based on participation in a wellness program.
This exception requires employers to meet certain conditions and follow regulations. Different rules apply based on whether employees are rewarded for simply participating in the wellness program or whether they must meet certain health goals in order to receive a reward.
A participatory plan
Under these programs, none of the conditions for obtaining a reward are based on an individual satisfying a standard related to a health factor. Additionally, these programs must be made available to all similarly situated individuals (again, regardless of health status).
If a company program is like this, the employer has no more requirements to meet. Some examples of programs in which no further work is required include the following:
- Programs that reimburse all or part of the cost of a fitness center club membership.
- A diagnostic testing program that provides a reward for participation and does not base any part of the reward on outcomes.
- A program that encourages preventive care through the waiver of copayment or deductible requirements. (Note, though, that the Affordable Care Act already requires non-grandfathered health plans to provide benefits for certain preventive health services without cost sharing.)
- A program that reimburses employees for the costs of smoking cessation programs without regard to whether the employee quits smoking.
- A program that provides a reward to employees for attending a monthly, no-cost health education seminar.
- A program that provides a reward to employees who complete a health reimbursement arrangement (HRA) regarding current health status, without any further action required by the employee about the health issues identified as part of the assessment.
There is no limit on financial incentives that plans may provide in relation to participatory wellness programs.
A health-contingent plan
Health-contingent wellness programs generally require participants to either satisfy a standard related to a health factor or undertake more than a similarly situated individual based on a health factor. Two types of such programs include activity-only programs, and outcome-based programs.
Activity-only programs require an individual to perform or complete an activity related to a health factor in order to obtain a reward. Examples include a walking, diet, or exercise program.
Outcome-based programs require an individual to attain or maintain a specific health outcome (such as not smoking or attaining certain results on biometric screenings) in order to obtain a reward.
- Health-contingent plans must meet five key HIPAA requirements.
1. Opportunity to qualify: The program must give individuals the opportunity to qualify for the reward at least once per year. This once-per-year requirement was included as a bright-line standard for determining the minimum frequency that is consistent with a reasonable design for promoting good health or preventing disease. Even if a participant repeatedly fails to meet a goal or complete a particular requirement, he or she must be offered an opportunity to requalify for the reward each year.
2. Size of the reward: The total reward for all the plan’s wellness programs that require satisfaction of a standard related to a health factor is limited — generally, it must not exceed 30 percent (or 50 percent for programs designed to prevent or reduce tobacco use) of the cost of employee-only coverage under the plan. If dependents (such as spouses and/or dependent children) may participate in the wellness program, the reward must not exceed 30 percent (or 50 percent) of the cost of the coverage in which an employee and any dependents are enrolled.
(Note that other laws may also limit the size of the reward. Under the Americans with Disabilities Act (ADA) and Genetic Information Nondiscrimination Act (GINA), wellness programs that use employee health data must be voluntary, and the reward cannot be so large that it is considered coercive.)
3. Reasonable design: A health-contingent wellness program must be reasonably designed to promote health or prevent disease. A program complies with this requirement if it:
- Has a reasonable chance of improving the health of, or preventing disease in, participating individuals;
- Is not overly burdensome;
- Is not a subterfuge for discrimination based on a health factor; and
- Is not highly suspect in the method chosen to promote health or prevent disease.
The determination of whether a health-contingent wellness program is reasonably designed is based on all the relevant facts and circumstances. The wellness program regulations are intended to allow experimentation in diverse and innovative ways for promoting wellness. While programs are not required to be accredited or based on evidence-based clinical standards, those that are may have greater success.
Wellness programs designed to dissuade or discourage enrollment in the plan or program by individuals who are sick or potentially have high claims experience will not be considered reasonably designed.
A program that collects a substantial level of sensitive personal health information without assisting individuals to make behavioral changes such as stopping smoking, managing diabetes, or losing weight, may fail to meet the requirement that the wellness program must have a reasonable chance of improving the health of, or preventing disease in, participating individuals. Programs that require unreasonable time commitments or travel may be considered overly burdensome. Such programs will be scrutinized and may be subject to enforcement action by the enforcing agencies.
4. Uniform availability and reasonable alternative standards: The wellness program regulations also state that, in order to be reasonably designed, an outcome-based wellness program must provide a reasonable alternative standard to qualify for the reward, for all individuals who do not meet the initial standard that is related to a health factor. This approach is intended to ensure that outcome-based wellness programs are more than mere rewards in return for results in biometric screenings or responses to a health risk assessment, and are instead part of a larger wellness program designed to promote health and prevent disease, ensuring the program is not a subterfuge for discrimination or underwriting based on a health factor.
For activity-only programs, a reasonable alternative standard (or waiver of the otherwise applicable standard) must be offered to any individual for whom it is unreasonably difficult due to a medical condition to satisfy the otherwise applicable standard, or for whom it is medically inadvisable to attempt to satisfy the otherwise applicable standard. Plans can seek physician verification with respect to a request for a reasonable alternative standard, if the request is reasonable under the circumstances.
For outcome-based programs, the reasonable alternative standard (or waiver of the otherwise applicable standard) must be offered to any individual who does not meet the initial standard based on the measurement, test, or screening. If the reasonable alternative standard is, itself, another outcome-based wellness standard, the reasonable alternative cannot be a requirement to meet a different level of the same standard without additional time to comply that takes into account the individual’s circumstances and an individual must be given the opportunity to comply with the recommendations of their personal physician as a second reasonable alternative standard (if the physician joins in the request).
It is not reasonable for plans to seek physician verification that a health factor makes it unreasonably difficult for the individual to satisfy, or medically inadvisable for the individual to attempt to satisfy a standard under an outcome-based wellness program.
For all health-contingent wellness programs (whether activity-only or outcome-based), all facts and circumstances are taken into account when determining whether a plan has provided a reasonable alternative standard, including but not limited to the following:
- If the reasonable alternative standard is completion of an educational program, the plan or issuer must make the educational program available or assist the employee in finding such a program (instead of requiring an individual to find such a program unassisted), and may not require an individual to pay for the cost of the program.
- The time commitment required must be reasonable (for example, requiring attendance nightly at a one-hour class would be unreasonable).
- If the reasonable alternative standard is a diet program, the plan or issuer is not required to pay for the cost of food but must pay any membership or participation fee.
- If an individual’s personal physician states that a program standard (including, if applicable, the recommendations of the plan’s medical professional) is not medically appropriate for that individual, the plan or issuer must provide a reasonable alternative standard that accommodates the recommendations of the individual’s personal physician with regard to medical appropriateness. Plans and issuers may impose standard cost sharing under the plan or coverage for medical items and services furnished pursuant to the physician’s recommendations.
5. Notice of reasonable alternative: The plan must disclose in all materials describing the terms of the program the availability of a reasonable alternative standard (or the possibility of a waiver of the initial standard).
It is sufficient to disclose that some reasonable alternative standard will be made available. Any plan materials that describe the general standard would also have to disclose the availability of a reasonable alternative. However, if the program is merely mentioned (and does not describe the general standard), employers are not required to include such a disclosure.
The following language can be used to meet this requirement:
- “If it is unreasonably difficult due to a medical condition for you to achieve the standards for the reward under this program, or if it is medically inadvisable for you to attempt to achieve the standards for the reward under this program, call us at [insert telephone number] and we will work with you to develop another way to qualify for the reward.”