The Health DATA Act of 2026 increases transparency and accountability in group health plans by strengthening audit rights, establishing fiduciary duties for data management, and prohibiting discrimination based on plan data.
Mark Takano
Representative
CA-39
The Health DATA Act of 2026 enhances transparency and accountability in group health plans by ensuring plan sponsors have full access to their own claims and pricing data. The bill establishes fiduciary responsibilities for those managing plan data and prohibits discrimination against participants based on that information. Additionally, it strengthens enforcement by imposing civil penalties on service providers who attempt to restrict data access through "gag clauses."
The Health DATA Act of 2026 is essentially a massive transparency upgrade for your company’s health insurance plan. Right now, many employers are flying blind because the 'middlemen' of healthcare—like Pharmacy Benefit Managers (PBMs) and third-party administrators—often use 'gag clauses' in their contracts to hide the actual cost of claims or the math behind their fees. This bill forces those doors open, requiring that every service contract allow for full audits of de-identified claims data. It also slaps a $10,000-per-day penalty on any provider that tries to block this access or delay it by more than 60 days. By making it easier for plans to see where the money is going, the goal is to drive down the premiums that come out of your paycheck every month.
Think of this like being able to see the itemized receipt for a group dinner instead of just being told what your share is. Under Section 2, health plans gain the explicit right to audit de-identified data to make sure they aren’t being overcharged. For a small business owner providing insurance, this means they can finally hire an independent auditor to verify if their PBM is actually passing on the drug rebates they promised. The bill specifically bans 'gag clauses' that prevent people from seeing pricing terms or overpayment recovery details. If a provider tries to charge an arm and a leg just to hand over the data, the bill limits those fees to 'reasonable direct costs,' ensuring that transparency doesn't come with a hidden surcharge.
One of the most significant shifts in this bill is found in Section 3, which expands the definition of a 'fiduciary.' In plain English, anyone who has authority over your health plan’s data—whether they are managing benefits or safeguarding records—now has a legal 'duty of care.' This means they must act in the best interest of you, the participant, rather than their own corporate bottom line. It’s a major level-up in accountability; if a service provider mishandles your data or uses it for their own gain, they aren't just breaking a contract—they are violating a federal fiduciary duty. This change acknowledges that in 2026, your health data is just as valuable as the money in your 401(k).
Finally, the bill draws a hard line on how this data can be used. Section 4 makes it illegal for employers or plan sponsors to fire, fine, or discipline you based on the information found in your health plan data. For example, an employer couldn't see high-cost claims for a specific treatment and then 'restructure' a worker out of a job to save the plan money. If they try, the bill allows you to head straight to court without jumping through the usual bureaucratic hoops first. With penalties set at $100 per day per affected person, it creates a real financial deterrent against using your private health history as a tool for workplace discrimination.