Lexology July 9, 2024
The U.S. Department of Health and Human Services (HHS) has issued a final rule that modifies the Standards for Privacy of Individually Identifiable Health Information (“the Privacy Rule”) under the Health Insurance Portability and Accountability Act (HIPAA). The purpose of this rule is to support reproductive healthcare privacy in the post-Dobbs era for both patients and healthcare providers. Although the changes become effective on December 22, 2024, changes to the Notices of Privacy Practices and other policies and procedures that affect group healthcare plans become mandatory on February 16, 2026.
The updated Privacy Rule will require group health insurance plans with access to protected health information (PHI) to alter their Business Associate Agreements, Notices of Privacy Practices, and HIPAA policies...