Title 29 › CHAPTER 18 — EMPLOYEE RETIREMENT INCOME SECURITY PROGRAM › SUBCHAPTER I — PROTECTION OF EMPLOYEE BENEFIT RIGHTS › Subtitle B — Regulatory Provisions › part 7 — group health plan requirements › Subpart B — Other Requirements › § 1185m
Stops group health plans and related insurers from signing contracts that stop them from sharing price and quality information. Plans must be allowed to give provider-specific cost or quality data to referring doctors, plan sponsors, people in the plan, or people who could join. Plans must be able to get de-identified claims and encounter data for each person if requested, following privacy rules under HIPAA (1996), GINA (2008), and the ADA (1990). That data can include per-claim financial details (like the allowed amount), provider name and role, service codes, and other claim elements. Plans may also share that data with business associates as the privacy rules allow. Health care providers or networks can still set reasonable limits on public release of the data. Plans and issuers must send the Secretary an annual statement saying they follow these rules. Nothing here changes existing state or federal privacy protections or the ways plans can access data under the HIPAA, GINA, or ADA privacy rules.
Full Legal Text
Labor, Source: USLM XML via OLRC
Legislative History
Reference
Citation
29 U.S.C. § 1185m
Title 29, Labor
Last Updated
Sep 23, 2026
Release point: 119-110