Health DATA Act of 2026

The Health DATA Act of 2026 strengthens the rights of group health plans to audit data held by healthcare providers and other service entities, requiring these partners to allow access to de-identified claims and pricing information without unreasonable restrictions. The bill mandates that contracts must permit audits to verify compliance and determine the reasonableness of compensation while strictly protecting participant privacy through existing HIPAA regulations. It also establishes new penalties for violations, including daily fines for failing to allow audits or discriminating against participants based on their plan data. Additionally, the law clarifies that plan sponsors and administrators have a fiduciary duty to safeguard data and makes it unlawful for employers or plan administrators to discriminate against individuals based on information derived from their health plans.