Last updated October 5, 2026
HIPAA and Protected Health Information
The Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA") apply to certain health care providers, health plans, health care clearinghouses, and their business associates.
Self Fund Platforms, Inc. ("Self Fund") is not a health plan, a health care provider, or a health care clearinghouse. Most of the information Self Fund handles, such as business contact details, plan designs, vendor contracts, bids, and pricing, is not Protected Health Information ("PHI").
When HIPAA applies. In some engagements Self Fund receives PHI, such as claims files or large claimant reports, from or on behalf of a group health plan so that vendors can prepare bids. When Self Fund receives, creates, maintains, or transmits PHI as a business associate of a group health plan, or as a subcontractor of a plan's business associate, Self Fund uses and discloses that information in accordance with HIPAA, the applicable Business Associate Agreement, and the legal obligations of the plan.
Safeguards. Where HIPAA applies, Self Fund maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of PHI.
Only what is needed. Self Fund asks for the least PHI needed to prepare a bid request. Where summary or deidentified information will do the job, Self Fund uses that instead.
Information shared with vendors. PHI is provided to vendors invited to bid only as the plan and the applicable Business Associate Agreement permit, and only for the purpose of preparing a bid.
Information shared with employers. HIPAA limits the PHI a health plan may share with the employer that sponsors it, and it prohibits plan sponsors from using PHI for employment related decisions. Self Fund follows the plan's instructions and the applicable Business Associate Agreement when it provides information to an employer.
No sale of PHI. Self Fund does not sell PHI and does not use PHI for advertising or marketing.
Your rights. If you are a member of a health plan that works with Self Fund, your plan's Notice of Privacy Practices describes how your PHI may be used and disclosed and the rights available to you under HIPAA. Requests to see or correct your information should go to your plan. Self Fund will cooperate with the plan as HIPAA and the Business Associate Agreement require.
This is not a Notice of Privacy Practices. Self Fund is not a covered entity under HIPAA. This page explains how Self Fund handles PHI as a business associate. It does not replace the Notice of Privacy Practices issued by your health plan.
Information outside HIPAA. Information that is not PHI is protected under Self Fund's Privacy Policy and applicable law.
Contact
Questions. For questions about how Self Fund handles health information, contact [privacy@selffund.com].