A new Health Insurance Portability and Accountability Act (HIPAA) privacy rule went into effect on June 25, that prohibits the disclosure of protected health information related to lawful reproductive health care in certain situations. Employers, as covered entities under HIPAA, must comply with the rule by Dec. 23.
Under the previous HIPAA privacy regulations, healthcare providers were allowed, but not required, to share patients’ reproductive health information with law enforcement. Such information could include contraception use, pregnancy- related care—including miscarriage and abortion—as well as infertility treatment.
The Biden administration issued the new rule after hearing concerns from providers that patients’ records could be unlawfully sought when they travel out of state to obtain reproductive care, especially after the Supreme Court overturned Roe v. Wade in June 2022. Several states instituted abortion restrictions and bans following the decision, causing some patients to cross state lines for care.
What the New Rule Covers
The new HIPAA reproductive health privacy rule aims to better protect patient confidentiality and prevent medical records from being used against those legally obtaining or providing reproductive care.
However, the rule does not:
- Cover reproductive health information when the services obtained were illegal
- Cover data outside of HIPAA protections, like location information or health details stored on personal devices
- Apply unless the care was lawfully obtained in a state where it is legal.
Required Signed Attestations
Under the new regulations, if a HIPAA-covered entity like an employer receives a request for protected health information potentially involving reproductive care, they must get a signed attestation stating the data will not be utilized for prohibited reasons.
Valid attestations must be provided on a standalone form, not attached to other documents when disclosing information for:
- Health oversight activities
- Judicial and administrative proceedings
- Law enforcement purposes
- Releases to coroners and medical examiners.
The Office for Civil Rights plans to publish a model attestation form to aid compliance ahead of the Dec. 23 deadline.
For more Employee Benefits resources, contact INSURICA today.
Copyright © 2024 Smarts Publishing. This is not intended to be exhaustive nor should any discussion or opinions be construed as legal advice. Readers should contact legal counsel or an insurance professional for appropriate advice.Â
About the Author
Share This Story
Related Blogs
Form 5500 Filing Season: What Employers Should Review Before July 31
As mid-year approaches, employers sponsoring benefit plans should begin preparing for upcoming Form 5500 filing obligations. For many calendar-year plans, Form 5500 filings are due by July 31, making June an ideal time to confirm whether filing requirements apply and ensure needed information is being gathered.
Pharmacy Costs Are Surging Again — What Employers Can Actually Do in 2026
Pharmacy spending is once again the fastest growing component of employer health plans. Specialty drugs now account for more than half of total pharmacy spend, and GLP 1 medications for diabetes and weight management are reshaping budgets. Employers are feeling the pressure: rising premiums, unpredictable claims, and employee expectations for access to high cost therapies.
Self Funding for Small and Mid Sized Employers: Why 2026 Is the Breakout Year
Self funding is no longer just for large employers. In 2026, small and mid sized businesses are embracing level funded and partially self funded plans at record rates. Rising premiums, greater access to stop loss coverage, and improved data analytics are making self funding a viable option for groups as small as 25–50 employees.