Health Care Providers, Health Plans and Business Associates only need to follow a simple "3-Step Safeguard" for emails and text messages to avoid violating HIPAA, administered by the Office for Civil Rights of the U.S. Department of Health and Human Services (HHS), and text message violations of the TCPA (Telephone Consumer Protection Act), administered by the Federal Communications Commission (FCC).
Robert F. Kennedy Jr., Secretary of the Department of Health and Human Services (HHS), has implemented significant changes to HHS, with more expected. Substantial modifications to the HIPAA Security Rule created during the previous administration are pending, and Secretary Kennedy is responsible for their final form. In June 2025, a federal court order declared the 2024 HIPAA privacy safeguards for reproductive health information unlawful and halted their nationwide enforcement.
On June 18, 2025, a court order invalidated the HIPAA regulations regarding Reproductive Health for HIPAA Regulated Entities (Health Care Providers, Plans, Clearinghouses and Business Associates) that had been mandatory since December 23, 2024.
Health Care Providers, Health Plans and Business Associates only need to follow a simple "3-Step Safeguard" for emails and text messages to avoid violating HIPAA, administered by the Office for Civil Rights of the U.S. Department of Health and Human Services (HHS), and text message violations of the TCPA (Telephone Consumer Protection Act), administered by the Federal Communications Commission (FCC).
Paul R. Hales