After 25 years serving in compliance leadership roles, I now work with plan sponsors, brokers and third-party administrators to complete their compliance projects. In addition to identifying and preparing plan documents containing applicable ERISA provisions and ACA requirements, I have in depth knowledge of federal expectations related to HIPAA privacy and security compliance. As the Privacy Officer for a managed care plan, I led efforts when the plan was selected for a full-scope random audit in 2012. Plan sponsors and their business associates, including brokers and TPAs, need to ensure that policies, risk assessments and staff training are accurate and current.