42 U.S.C. 1320d–8 HIPAA · Chapter 7: SOCIAL SECURITY
42 U.S.C. 1320d–8 HIPAA: Processing payment transactions by financial institutions
United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026.
Official text
To the extent that an entity is engaged in activities of a financial institution (as defined in section 3401 of title 12), or is engaged in authorizing, processing, clearing, settling, billing, transferring, reconciling, or collecting payments, for a financial institution, this part, and any standard adopted under this part, shall not apply to the entity with respect to such activities, including the following:
The use or disclosure of information by the entity for authorizing, processing, clearing, settling, billing, transferring, reconciling or collecting, a payment for, or related to, health plan premiums or health care, where such payment is made by any means, including a credit, debit, or other payment card, an account, check, or electronic funds transfer.
The request for, or the use or disclosure of, information by the entity with respect to a payment described in paragraph (1)—
for transferring receivables;
for auditing;
in connection with—
a customer dispute; or
an inquiry from, or to, a customer;
in a communication to a customer of the entity regarding the customer’s transactions, payment card, account, check, or electronic funds transfer;
for reporting to consumer reporting agencies; or
for complying with—
a civil or criminal subpoena; or
a Federal or State law regulating the entity.
Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced.
Source credit: ( Aug. 14, 1935, ch. 531 , title XI, § 1179, as added Pub. L. 104-191, title II, § 262(a) , Aug. 21, 1996 , 110 Stat. 2030 .)
42 U.S.C. 1320d–8 on the Office of the Law Revision Counsel
United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026.
This is reference material, not legal advice.