Title 29 › Chapter 18— EMPLOYEE RETIREMENT INCOME SECURITY PROGRAM › Subchapter I— PROTECTION OF EMPLOYEE BENEFIT RIGHTS › Subtitle Subtitle B— Regulatory Provisions › Part 7— group health plan requirements › Subpart B— Other Requirements › § 1185m
Group health plans and insurers can't sign contracts with providers, networks, administrators, or other vendors that stop the plan from giving or getting certain cost and quality information. Plans must be able to share provider-specific cost or quality data with referring doctors, the employer who sponsors the plan, people in the plan, and those who could join. Plans must be allowed to get electronic, de-identified claims and encounter data for each person covered if asked, and that can include per-claim financial details (like the allowed amount or other money owed), provider name and role, service codes, and other claim data. Plans may also share that data with business associates (partners who handle health data) under privacy rules like HIPAA, GINA, and the ADA. Providers and networks can still put reasonable limits on public release of the information. Plans and issuers must send a yearly statement to the Secretary saying they follow these rules. Nothing here changes existing state or federal privacy protections or other allowed access under those privacy laws.
Full Legal Text
Labor — Source: USLM XML via OLRC
Legislative History
Reference
Citation
29 U.S.C. § 1185m
Title 29 — Labor
Last Updated
Apr 5, 2026
Release point: 119-73not60