On June 25, 2024, changes to the HIPAA Privacy Rule aimed at supporting reproductive health care privacy went into effect. Last week, I published a blog post about these changes, including the creation of three new types of prohibited uses and disclosures of protected health information (PHI). This post addresses another major change to the law: a new attestation requirement that applies to four types of uses and disclosures when the PHI at issue is “potentially related” to reproductive health care. It’s not just covered entities and business associates that need to understand this new requirement- judicial officials, law enforcement, health oversight agencies, and medical examiners who frequently request PHI to carry out their official duties will likely encounter situations that require them to comply with the new attestation requirement, too.