HIPAA amended the Employee Retirement Income Security Act (ERISA) to provide new rights and protections for members of group health plans. HIPAA contains protections both for health coverage offered in connection with employment (group health plans) and for individual insurance policies sold by insurance companies.