We have been performing a HIPPA audit annually because we maintain a self-funded, employer-sponsored health plan and believe it is subject to HIPAA regulations because HR has access to protected health information (aka PHI).

Does anyone else do this audit? I'm hearing most of our peers locally are not? Thank you.