1 minute read
The U.S. Department of Health and Human Services (HHS) has updated its webpage on safeguarding reproductive health care privacy. The webpage includes additional resources and a HIPAA model attestation form, which can be utilized by covered entities and business associates to use to comply with the new privacy measures for reproductive health care. These new privacy safeguards will become effective on December 23, 2024.
On April 26, 2024, HHS strengthened the HIPAA Privacy Rule by prohibiting the disclosure of protected health information (PHI) related to lawful reproductive health care. Regulated entities must not use or disclose PHI in certain situations for investigations or proceedings related to reproductive health care. They must presume the lawfulness of care unless proven otherwise.
Regulated entities must obtain a valid attestation before disclosing PHI related to reproductive health care for specific purposes. This ensures compliance with privacy regulations and confirms the disclosure is not for a prohibited purpose. The attestation must be a standalone document with specific information, including a clear statement that the disclosure is permissible. Entities can use the HHS model attestation form for these requests.
Covered entities must update their HIPAA notice of privacy practice for the new protections by February 16, 2026. Download the bulletin for more details.