Beneficiaries are responsible for paying the insurance premium. Companies are permitted to charge COBRA beneficiaries a premium for continuation coverage of up to 102 percent of the cost of the coverage to the plan. HIPAA was enacted by Congress to address healthcare issues that individuals faced including changing coverage, portability of care, privacy and security rights, and to prevent fraud. The main purpose of the act was to provide patient privacy rights and prevent disclosure of patient information by requiring that individuals and businesses protect these individual rights. Those required to protect individual health information are all healthcare providers, health plan, and healthcare clearinghouses. The information that is considered to be patient health information (PHI) is any information including past, present, or future health conditions (mental and physical), demographic data, and any information that can be used to identify individuals associated with their health care plan. The key provisions of HIPPA are as follows: access to medical records, notice of privacy practices, limits on use of personal medical information, prohibition on marketing, stronger state laws, confidential communications, and complaints. Although the concept that a patient’s medical information should remain private has been accepted for many years, the new regulations have introduced a previously unseen level of