HHSFinal Rule

HIPAA Privacy Rule To Support Reproductive Health Care Privacy; Final Rule

Healthcare

Summary

This final rule amends the HIPAA Privacy Rule to prohibit the use or disclosure of protected health information for the purpose of investigating or imposing liability on individuals, health care providers, or others who seek, obtain, provide, or facilitate reproductive health care that is lawful under the circumstances in which it is provided. Regulated entities must update their notices of privacy practices and obtain signed attestations before disclosing reproductive health information.

Key Points

  • 1Prohibits disclosure of PHI to investigate lawful reproductive health care
  • 2Requires signed attestations before releasing reproductive health information for certain purposes
  • 3Covered entities must update their notices of privacy practices within 180 days
  • 4Applies to health plans, health care clearinghouses, and most health care providers
  • 5Does not affect disclosures required for treatment, payment, or standard health care operations

Key Dates

Published

April 26, 2024

Effective

June 25, 2024

Related Executive Orders

View on The Executive Order Digest

This summary is for informational purposes only. It may not capture all nuances of the regulation. Always refer to the official text for authoritative information.