A health care plan with fewer than 50 participants that’s administered by a sponsoring employer may have fewer compliance hassles. That’s because it’s excluded from the definition of a “group health plan” under administrative simplification provisions of the Health Insurance Portability and Accountability Act (HIPAA). These provisions include privacy and security requirements. This can be welcome relief for smaller employers, though it should be noted that the definition of “group health plan” for other purposes, such as Employee Retirement Income Security Act (ERISA) and the Consolidated Omnibus Budget Reconciliation Act (COBRA), contain no such exclusion. Many smaller employers encounter uncertainty when determining just how to define “participant.” For example, say a company has 60 employees, all of whom are eligible for a fully insured medical plan and a health Flexible Spending Account (FSA), but only 40 employees enroll in the medical plan and health FSA. Does the health FSA, ...