HHS Finalizes HIPAA Rule to Replace Fax-Based Claims Attachments with E-Standards

Opening

The Department of Health and Human Services (HHS) has finalized a rule that will standardize how healthcare providers and insurers exchange clinical documentation supporting insurance claims — replacing the industry's heavy reliance on fax machines, mail, and portal uploads with a uniform electronic standard. Published March 24, 2026, and effective May 26, 2026, the rule gives covered entities two years to comply before the May 26, 2028 deadline.

What's Changing

Despite the healthcare industry's broad adoption of electronic health records (EHRs), the exchange of supporting documents for insurance claims — things like clinical notes, lab results, and medical records sent to justify a claim — has stayed largely manual. Providers routinely fax or mail this documentation, creating delays, administrative waste, and data errors.

This rule fixes that by adopting specific technical standards that all covered entities must use:

• X12N 277 – Health Care Claim Request for Additional Information [006020X313]
• X12N 275 – Additional Information to Support a Health Care Claim or Encounter [006020X314]
• HL7 C-CDA Templates for Clinical Notes (Release 2.1, June 2019 with Errata) — two volumes covering introductory material and templates
• HL7 CDA Release 2 Attachment IG: Exchange of C-CDA Based Documents, Release 2, March 2022
• HL7 IG for CDA Release 2: Digital Signatures and Delegation of Rights, Release 1 — the standard for electronic signatures used with these transactions

New regulatory definitions for "attachment information," "electronic signature," and "health care claims attachments transaction" are also added to 45 CFR Part 162.

What Was Dropped From the Proposed Rule

The original proposed rule also included standards for prior authorization attachments. HHS dropped that piece in the final rule after commenters raised serious concerns about conflicts with the existing X12N 278 prior authorization transaction standard and misalignment with CMS's separate Interoperability and Prior Authorization final rule. Prior authorization attachment standards will not be finalized at this time.

The final rule also upgrades one key implementation guide: HHS adopted the March 2022 version of the HL7 Attachments IG rather than the 2017 version proposed, after determining the 2022 updates are technical maintenance improvements that better support the X12N standards.

The Cost-Benefit Picture

HHS estimates the rule will carry a primary net annualized cost of approximately $303.75 million (at a 7% discount rate). That figure reflects $478.23 million in annualized costs — including $14.13 million in regulatory review costs — offset by $781.98 million in annualized savings from reduced administrative burden and improved efficiency.