164.504(f)

Uses and disclosures: Organizational requirements : Group health plans must ensure that the plan documents restrict uses and disclosures of protected health information by the plan sponsor.

Relevant California Laws: