Plan sponsors who are employers
of medium (51 - 199 employees) and large (over 200 employees)
firms that provide health benefits through contracts with issuers are more likely to want access to protected health information for plan administration, for example to use it to audit claims or perform quality assurance
functions on behalf of the group health plan.