Regardless of whether a self-insured group health plan operates under a Health Maintenance Organization model (HMO) or Preferred provider Organization model (PPO) the same requirements exist to ensure the privacy of employees´ individually identifiable health information and the security of electronic Protected Health Information.