Reproductive Health Information Protections Afforded by New HIPAA Privacy Guidance

On April 26, 2024, the U.S. Department of Health and Human Services (HHS) issued a Final Rule updating certain Health Insurance Portability and Accountability Act (HIPAA) privacy rules with respect to the disclosure of protected health information (PHI) related to reproductive health care. Essentially, the Final Rule prohibits a covered entity from using or disclosing PHI to conduct criminal, civil or administrative investigations, or to impose corresponding liability on a person seeking or providing lawful reproductive health care.

Reproductive health care is broadly defined as “health care that affects the health of the individual in all matters relating to the reproductive system and to its functions and processes.” The preamble provides a non-exhaustive list of examples, including contraception, fertility and infertility treatments, and pregnancy-related care.