Lexology June 23, 2025
Reed Smith LLP

Key takeaways

  • U.S. District Court for the Northern District of Texas vacated nearly all of the 2024 amendments to the HIPAA Privacy Rule that created special protections for reproductive health care information, finding that HHS exceeded its statutory authority.
  • The court determined that the Reproductive Health Privacy Rule improperly limited state child abuse reporting laws, impermissibly redefined key statutory terms like “person” and “public health,” and violated the “major questions doctrine” by regulating politically significant areas without clear congressional authorization.
  • As a result of the ruling, HIPAA covered entities and business associates must revisit and potentially revise policies, procedures, training programs, business associate agreements, and notices of privacy practices that were updated to comply with the now-vacated rule.
  • Despite...

Today's Sponsors

Venturous
ZeOmega

Today's Sponsor

Venturous

 
Topics: Govt Agencies, Healthcare System, HIPAA, Privacy / Security, Provider
OCR Kicks Off 2026 with Reminders about "System Hardening" for HIPAA Covered Entities
Providers Evaluate Security as Updated HIPAA Compliance Looms
Updates to HIPAA Notice of Privacy Practices Required by February 16, 2026
How Healthcare Organizations Can Navigate Security Changes Linked to HIPAA Updates
Preparing for the HIPAA Security Rule Update

Share Article