A group health plan may disclose protected health information to the Plan Administrator in its capacity as plan sponsor. The Plan Administrator will use and disclose such information in a manner consistent with the HIPAA requirements of the Standards for Privacy of Individually Identifiable Health Information including the applicable requirements of 45 CFR §164.504(f).
Okla. Admin. Code § 260:40-35-1