Individual health insurance policy.

(2) Individual health insurance policy. To the extent an individual health insurance policy is subject to an applicable HIPAA requirement, a health insurance issuer is subject to a civil money penalty if the policy itself, or the manner in which the policy is marketed or administered, violates any applicable HIPAA requirement.

Source

45 CFR § 150.305

---

Scoping language

If a failure to comply is established under this part, the responsible entity, as determined under this section, is liable for any civil money penalty imposed.

---

Is this correct? or