HSA Shop logoHSA Shop

HSA Guide

Are HSA's Subject to HIPAA? Understanding Health Savings Accounts and Health Information Privacy

Published January 31, 2022

Check eligibility on the gobrowse 7,000+ HSA-eligible products in the free app.

Get the app
Short answer: HSAs are not subject to HIPAA regulations because they are not considered covered entities, though information shared with your healthcare provider or insurer remains protected by HIPAA.

Whether HSAs fall under HIPAA

Health Savings Accounts (HSAs) have gained popularity as a way for individuals to save for medical expenses while enjoying tax benefits. Many people wonder if HSAs are subject to HIPAA regulations, the Health Insurance Portability and Accountability Act that protects patients' health information.

Health Savings Accounts (HSAs) have become increasingly popular for individuals looking to save on healthcare costs while taking advantage of significant tax benefits. A common question that arises is whether these accounts fall under the purview of HIPAA, or the Health Insurance Portability and Accountability Act, which is designed to safeguard patient health information.

Why HSAs aren’t HIPAA-covered entities

HSAs are not subject to HIPAA regulations because they are not considered covered entities under the law. While HIPAA applies to healthcare providers, health plans, and healthcare clearinghouses, HSAs are considered personal savings accounts.

HIPAA protection still applies for shared info

However, it's essential to understand that the information you share with your healthcare provider or insurer is still protected by HIPAA regulations, even if you pay for services using funds from your HSA.

When using your HSA, you may need to provide some information to verify eligible expenses, but your personal health information remains protected under HIPAA.

Free App

Browse 7,000+ HSA-Eligible Products

Search by symptom, get price alerts, and build your HSA shopping list — all in the free app.

← Back to all articles