1. Wiley Rein & Fielding LLP G-L-B’s Applicability To Health Care Organizations Kirk J. Nahra Wiley Rein & Fielding LLP Washington, D.C. 202.719.7335KNahra@WRF.com Fourth National HIPAA Summit (April 26, 2002)

2. Wiley Rein & Fielding LLP2 Focus Scope of G-L-B Differences in terms and applications Intersections and overlaps with HIPAA Who should care about G-L-B and why? Scope of G-L-B Differences in terms and applications Intersections and overlaps with HIPAA Who should care about G-L-B and why?

3. Wiley Rein & Fielding LLP3 Who Is Covered? Any company “significantly engaged” in financial activities –Banking –Securities –Insurance (all lines) Odd assortment of other companies –Retailers who issues their own credit cards, real estate and personal property appraisers, tax preparers, automobile dealerships who lease automobiles, developers of financial software, career counselors providing advice for employees in the financial services industry and businesses that print and sell checks for consumers Any company “significantly engaged” in financial activities –Banking –Securities –Insurance (all lines) Odd assortment of other companies –Retailers who issues their own credit cards, real estate and personal property appraisers, tax preparers, automobile dealerships who lease automobiles, developers of financial software, career counselors providing advice for employees in the financial services industry and businesses that print and sell checks for consumers

4. Wiley Rein & Fielding LLP4 Key Terms Affiliates/non-affiliates Disclosure/use Opt-out/opt-in Customers and consumers

5. Wiley Rein & Fielding LLP5 NAIC Model Separate category for health information ERISA beneficiaries covered? Applies to all business units Tougher for insurance industry than rest of financial services? Health/financial distinction Intersections with HIPAA

6. Wiley Rein & Fielding LLP6 What Information is Covered? Financial/health PHI Making sense of the distinction

7. Wiley Rein & Fielding LLP7 Multiple Coverage Issues For health plans Treatment of information Whose information Differences among lines of coverage

8. Wiley Rein & Fielding LLP8 For health care providers Business complexity Tie with HIPAA Service providers

9. Wiley Rein & Fielding LLP9 Contracting Differences Contracting Audiences Contract Options Contract Strategies

10. Wiley Rein & Fielding LLP10 Security Issues Security under G-L-B Security rule for HIPAA Privacy and security connections

11. Wiley Rein & Fielding LLP11 Enforcement Activity What lessons can be learned? Enforcement to date What does the future hold? Enforcement options

12. Wiley Rein & Fielding LLP12 The New HIPAA Rules(?) Timing Contracting issues Non-covered products Health insurer compliance?