The Privacy of Reproductive Health Care Data: A Critical Health Insurance Portability and Accountability Act of 1996 Update

On April 26, 2024, the Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services (HHS) issued a Final Rule titled "HIPAA Privacy Rule to Support Reproductive Health Care Privacy."¹ As per the attendant Federal Register, the Final Rule was to become effective on June 25, 2024.¹ In so doing, HHS was complying with President Biden's Executive Order 14076 the sole focus of which was "Securing Access to Reproductive and Other Healthcare Services."² The newly (announced Final Rule bolsters the Health Insurance Portability and Accountability Act of 1996 [HIPAA; Public Law No: 104-191) which "provides penalties" for "wrongful disclosure of individually identifiable health information."¹ Among its leading objectives, the Final Rule seeks to protect women who cross state lines in search of an abortion.¹ Data reported by the Guttmacher Institute suggest that nearly one in five abortion patients sought out-of-state care during the first 6 months of 2023, a two-fold increase when compared with the same period in 2020.³ The Final Rule also protects those who provide or facilitate lawful reproductive health care who might otherwise be targeted by state prosecutors with criminal probes or lawsuits in mind.¹ The administration and enforcement of the newly issued Final Rule will be the designated responsibility of the OCR.¹ In a clear reference to Dobbs v. Jackson Women's Health Organization, HHS Secretary Xavier Becerra made note of the reality that "with reproductive health under attack by some lawmakers, these protections are more important than ever."⁴ It is the objective of this Commentary to review the multiple facets of the reproductive privacy imperative and the projected oversight thereof.