Title 29 › Chapter CHAPTER 18— - EMPLOYEE RETIREMENT INCOME SECURITY PROGRAM › Subchapter SUBCHAPTER I— - PROTECTION OF EMPLOYEE BENEFIT RIGHTS › Subtitle Subtitle B— - Regulatory Provisions › Part part 7— - group health plan requirements › Subpart Subpart B— - Other Requirements › § 1185m
Health plans and insurers must not sign contracts that stop them from sharing provider-specific cost or quality information with referring doctors, the plan sponsor, people covered by the plan, or people who could join the plan. They also must not be blocked from electronically getting de-identified claims and encounter data for each person in the plan when requested, following privacy rules like HIPAA, GINA, and the ADA. That data can include per-claim financial details (for example, the allowed amount), provider name and role, service codes, and other claim elements. Plans may share this information with a business associate as defined in 45 C.F.R. 160.103 (or its successor) if privacy rules are followed. Providers or networks may still set reasonable limits on making the information public. Each plan or issuer must annually send the Secretary a statement saying it follows these rules. Nothing here weakens existing state or federal privacy protections or limits data access allowed under HIPAA, GINA, or the ADA.
Full Legal Text
Labor — Source: USLM XML via OLRC
Legislative History
Reference
Citation
29 U.S.C. § 1185m
Title 29 — Labor
Last Updated
Apr 6, 2026
Release point: 119-73