Does a small employer (less than 40 employees) need to modify their fully insured HMO summary of benefits to put in HIPAA privacy language. How about ancillary benefits such as LTD, STD, life etc.

Its my understanding that HIPAA does not apply to disability or life plans or health information collected by those plans. However, the information should still be considered confidential.