Opening

The Department of Health and Human Services (HHS) has finalized a landmark rule that will force the health care industry to abandon fax machines and manual portals for exchanging clinical documents tied to insurance claims. Published March 24, 2026, the rule establishes federal standards for electronic claims attachments — the supporting documentation providers send to health plans to justify payment — and sets a binding compliance deadline of May 26, 2028.

Key Points

  • What: HHS finalizes HIPAA standards for electronic health care claims attachment transactions and electronic signatures
  • Who: Health plans, health care providers, and other HIPAA-covered entities
  • When: Rule effective May 26, 2026; compliance required by May 26, 2028
  • Impact: Covered entities must replace manual/fax-based claims documentation processes with standardized electronic transactions

Why This Rule Matters

Despite widespread adoption of electronic health records (EHR), the exchange of supporting documents for claims — things like lab results, clinical notes, and physician letters — has remained stubbornly manual. Fax, mail, and portal uploads are still the norm.

This rule changes that by mandating specific technical standards that all covered entities must use when sending and receiving claims attachment data.

What Standards Are Being Adopted?

HHS is requiring covered entities to implement the following:

  • X12N 277 – Health Care Claim Request for Additional Information [006020X313]
  • X12N 275 – Additional Information to Support a Health Care Claim or Encounter [006020X314]
  • HL7 C-CDA Templates for Clinical Notes (Volume One and Two, June 2019 with Errata)
  • HL7 CDA Release 2 Attachment IG: Exchange of C-CDA Based Documents, Release 2, March 2022
  • HL7 IG for CDA Release 2: Digital Signatures and Delegation of Rights, Release 1 — the first federal standard for electronic signatures used with claims attachments

The electronic signature standard only applies when used in conjunction with claims attachment transactions — it's not a standalone universal e-signature rule.

What Was Dropped From the Proposed Rule

The original proposed rule also included standards for prior authorization attachments — a move that drew significant pushback from commenters.

Critics raised two main concerns: potential conflict with the already-mandated X12N 278 standard for prior authorization, and misalignment with CMS's separately finalized Interoperability and Prior Authorization rule. HHS listened — prior authorization attachment standards are not included in this final rule.

The Numbers

HHS estimates the rule will generate net annualized savings of $781.98 million against annualized costs of $478.23 million (including $14.13 million in regulatory review costs), for a primary net annualized cost of approximately $303.75 million (discounted at 7%). The savings come from reduced administrative burden from eliminating manual processes.

What You Should Do

This rule does not affect individual patients or visa holders — it's aimed squarely at health plans, hospitals, physician practices, and other HIPAA-covered entities.

If you work in health care compliance, revenue cycle management, or health IT:

  • Mark May 26, 2028 as your compliance deadline — you have roughly two years to implement the required X12N and HL7 standards
  • Begin assessing current claims attachment workflows to identify gaps
  • Engage your EHR and clearinghouse vendors now about their implementation timelines for X12N 275, X12N 277, and the HL7 C-CDA Attachment IG (Release 2, March 2022)
  • Watch for future rulemaking on prior authorization attachments — HHS signaled this issue is not closed, just deferred