Skip to main content

Reproductive Rights Amendment to HIPAA Privacy and Security Policies and Procedures

I. Purpose

This amendment aims to reinforce the protection of individuals' reproductive health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and to uphold reproductive rights. This includes the right to privacy and confidentiality of reproductive health services and related information.

II. Definitions

  1. Reproductive Health Information: Any information related to an individual's reproductive health services, including but not limited to contraception, pregnancy, fertility treatments, abortion, and related medical conditions.
  2. Protected Health Information (PHI): Individually identifiable health information that is transmitted or maintained in any form or medium, including reproductive health information.

III. Policy

  1. Confidentiality: All reproductive health information shall be treated as highly confidential and must be protected in accordance with HIPAA regulations and this amendment.
  2. Access Control: Only authorized personnel with a legitimate need to know shall have access to reproductive health information. Access shall be granted and monitored according to established access control procedures outlined in the Attestation for a Requested Use or Disclosure of Protected Health Information Potentially Related to Reproductive Health Care.
  3. Disclosure: Reproductive health information shall not be disclosed to third parties without explicit written consent from the individual, except as required by law or as necessary for treatment, payment, or healthcare operations as outlined in the Attestation for a Requested Use or Disclosure of Protected Health Information Potentially Related to Reproductive Health Care.
  4. Training: All employees, contractors, and agents shall receive training on the importance of protecting reproductive health information and the specific provisions of this amendment.
  5. Incident Response: Any unauthorized access, use, or disclosure of reproductive health information shall be promptly reported and investigated. Appropriate measures shall be taken to mitigate any potential harm and prevent future occurrences.

Adopted By: Misty Miller
Title: Manager, Benefits and Wellness
Date: December 23, 2024