Okla. Admin. Code § 260:40-35-1
A group health plan may disclose protected health information to the Plan Administrator in its capacity as plan sponsor. The Plan Administrator will use and disclose such information in a manner consistent with the HIPAA requirements of the Standards for Privacy of Individually Identifiable Health Information including the applicable requirements of 45 CFR §164.504(f).
Added at 31 Ok Reg 1358, eff 9-12-14