--- title: "42 U.S.C. 17936 HIPAA: Conditions on certain contacts as part of health care operations" canonical: "https://dposchool.com/hipaa/section/17936" source: "https://uscode.house.gov/us/usc/119-136/t42/s17936/" source_note: "Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 45, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR." text_as_of: "2026-10-22" language: "en" publisher: "DPO School" --- 42 U.S.C. 17936 HIPAA · Chapter 156: HEALTH INFORMATION TECHNOLOGY # 42 U.S.C. 17936 HIPAA: Conditions on certain contacts as part of health care operations United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026. ## Official text ### 42 U.S.C. 17936(a) **(a)** Marketing #### 42 U.S.C. 17936(a)(1) **(1)** In general A communication by a covered entity or business associate that is about a product or service and that encourages recipients of the communication to purchase or use the product or service shall not be considered a health care operation for purposes of subpart E of part 164 of title 45, Code of Federal Regulations, unless the communication is made as described in subparagraph (i), (ii), or (iii) of paragraph (1) of the definition of marketing in section 164.501 of such title. #### 42 U.S.C. 17936(a)(2) **(2)** Payment for certain communications A communication by a covered entity or business associate that is described in subparagraph (i), (ii), or (iii) of paragraph (1) of the definition of marketing in section 164.501 of title 45, Code of Federal Regulations, shall not be considered a health care operation for purposes of subpart E of part 164 of title 45, Code of Federal Regulations if the covered entity receives or has received direct or indirect payment in exchange for making such communication, except where⁠— ##### 42 U.S.C. 17936(a)(2)(A) **(A)** (i) such communication describes only a drug or biologic that is currently being prescribed for the recipient of the communication; and ##### 42 U.S.C. 17936(a)(2)(ii) **(ii)** any payment received by such covered entity in exchange for making a communication described in clause (i) is reasonable in amount; ##### 42 U.S.C. 17936(a)(2)(B) **(B)** each of the following conditions apply⁠— ###### 42 U.S.C. 17936(a)(2)(B)(i) **(i)** the communication is made by the covered entity; and ###### 42 U.S.C. 17936(a)(2)(B)(ii) **(ii)** the covered entity making such communication obtains from the recipient of the communication, in accordance with section 164.508 of title 45, Code of Federal Regulations, a valid authorization (as described in paragraph (b) of such section) with respect to such communication; or ##### 42 U.S.C. 17936(a)(2)(C) **(C)** each of the following conditions apply⁠— ###### 42 U.S.C. 17936(a)(2)(C)(i) **(i)** the communication is made by a business associate on behalf of the covered entity; and ###### 42 U.S.C. 17936(a)(2)(C)(ii) **(ii)** the communication is consistent with the written contract (or other written arrangement described in section 164.502(e)(2) of such title) between such business associate and covered entity. #### 42 U.S.C. 17936(a)(3) **(3)** Reasonable in amount defined For purposes of paragraph (2), the term “reasonable in amount” shall have the meaning given such term by the Secretary by regulation. #### 42 U.S.C. 17936(a)(4) **(4)** Direct or indirect payment For purposes of paragraph (2), the term “direct or indirect payment” shall not include any payment for treatment (as defined in section 164.501 of title 45, Code of Federal Regulations) of an individual. ### 42 U.S.C. 17936(b) **(b)** Opportunity to opt out of fundraising The Secretary shall by rule provide that any written fundraising communication that is a healthcare operation as defined under section 164.501 of title 45, Code of Federal Regulations, shall, in a clear and conspicuous manner, provide an opportunity for the recipient of the communications to elect not to receive any further such communication. When an individual elects not to receive any further such communication, such election shall be treated as a revocation of authorization under section 164.508 of title 45, Code of Federal Regulations. ### 42 U.S.C. 17936(c) **(c)** Effective date This section shall apply to written communications occurring on or after the effective date specified under section 13423.1 ## Notes in the official text - (1) See References in Text note below. ## Source Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source credit: ( Pub. L. 111-5, div. A, title XIII, § 13406 , Feb. 17, 2009 , 123 Stat. 268 .) [42 U.S.C. 17936 on the Office of the Law Revision Counsel](https://uscode.house.gov/us/usc/119-136/t42/s17936/) United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026. This is reference material, not legal advice. ## Navigation [HIPAA Navigator](https://dposchool.com/hipaa) / 42 U.S.C. 17936 Previous: [42 U.S.C. 17935 HIPAA: Restrictions on certain disclosures and sales of health information; accounting of certain protected health information disclosures; access to certain information in electronic format](https://dposchool.com/hipaa/section/17935) Next: [42 U.S.C. 17937 HIPAA: Temporary breach notification requirement for vendors of personal health records and other non-HIPAA covered entities](https://dposchool.com/hipaa/section/17937) ## For AI agents - Machine-readable index: https://dposchool.com/hipaa/llms.txt - JSON API: https://dposchool.com/hipaa/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents