HHS Updates: Shifts in Gender Care Guidance, Proposed HIPAA Changes, and Advances in Public Health Data Reporting

Welcome to this week's update on the Department of Health and Human Services. The most significant headline this week comes from a major policy shift. On February 20, 2025, the HHS Office for Civil Rights rescinded its 2022 guidance on anti-discrimination and privacy in gender-affirming care. This move aligns with the current administration's stance on gender-affirming care but adds to the confusion and complexity for healthcare providers and insurers in meeting their compliance obligations under federal and state law[1]. In other news, the HHS has proposed significant changes to the HIPAA Security Rule, aiming to enhance the confidentiality, integrity, and availability of electronic protected health information. The proposed rule, issued on January 6, 2025, includes updates to address technological advancements, rising breaches, and cyberattacks. Comments are due by March 7, 2025, and the new rules are expected to become effective later this year, with a compliance deadline 180 days after publication[2][5]. On a different front, the New York State Department of Health has begun publishing a weekly global health data report to aid other jurisdictions in tracking outbreaks. This initiative underscores the importance of timely, high-quality data in public health decision-making. Dr. James McDonald, New York State Health Commissioner, emphasized that public health data are vital for understanding the burden and impact of emerging infections[4]. These developments have significant impacts on American citizens, businesses, and state and local governments. The rescission of the gender-affirming care guidance may lead to compliance challenges for healthcare providers and insurers. The proposed HIPAA Security Rule updates will require considerable time and expense for covered entities and their business associates, with estimated industry-wide costs of $9 billion in the first year and $33 billion over five years[2]. Citizens can engage with these developments by providing comments on the proposed HIPAA Security Rule updates before March 7, 2025. For more information on these changes and how to submit comments, visit the HHS website. Next steps to watch include the publication of the final HIPAA Security Rule and the compliance deadline for the new requirements. Stay tuned for further updates on these critical developments in healthcare policy and public health. This content was created in partnership and with the help of Artificial Intelligence AI.