Though most employers are not covered entities, many are plan sponsors subject to the obligations of a plan sponsor and/or plan administrator under HIPAA or ERISA. Plan sponsors likely have an obligation to ensure their plans comply with HIPAA. This creates a twofold role for employers. First, you must ensure that any covered plans comply with the applicable HIPAA requirements. Verify that any of your TPAs or insurance carriers comply with HIPAA requirements.