150.201—State enforcement.

Except as provided in subpart C of this part, each State enforces HIPAA requirements with respect to health insurance issuers that issue, sell, renew, or offer health insurance coverage in the State.