New Federal Law Affecting Subpoenas Effective December 23, 2024

HIPAA REPRODUCTIVE HEALTH ATTESTATION HIPAA

Privacy Rule at CFR 164.502(a)(5)(iii)

The HIPAA Privacy Rule applies to all medical records sought from any state that allows certain reproductive-associated procedures considered unlawful in some other states. It requires an Attestation for every subpoena for medical records. It must be signed by the “requester,” the claims handler, or the attorney, not by a third-party record retrieval service.

  1. The law applies to covered healthcare providers, health plans, healthcare clearinghouses, and their business associates. All will require an attestation to be presented with any subpoena for medical records. Pharmacies also require an attestation.
  2. The attestation form must be signed and filled out by the “requester,” the claims handler or attorney, when requesting medical records.
  3. Every medical facility in California will require the completed attestation to be served with a subpoena for medical records.
  4. Covered facilities in 26 states, including California, will require this form for medical record subpoenas.
  5. Some national medical facilities may require an Attestation for all subpoenas. (Example: Rite Aid.)
  6. Some facilities require their own Attestation Form.
  7. This form is not required for patient-signed authorizations.

HIPPA Rules and Sample Form can be found here

 

Categorized in: