HIPAA Privacy Policies, Procedures and Notices of Privacy Practices
Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), final privacy rules set basic limitations on the use or disclosure by covered entities (such as employer health benefit plans) and their business associates of reproductive health care information. The final rules state that reproductive care is presumed to be legal unless the employer health benefit plan or its business associate has "actual knowledge" that the care was not lawful under the circumstances. The final rules generally require compliance on December 23, 2024. Effective February 16, 2026, covered entities (such as employer health benefit plans) will be required to update their notices of privacy practices. Additionally, the 2024 rules modify the HIPAA rules on disclosure of PHI to report abuse or neglect and for public health purposes to limit access to reproductive care information. For example, under current rules, a health benefit plan can refuse to treat an individual a...