On September 30th, 2025, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Cadia Healthcare Facilities for potential violations of the HIPAA Privacy and Breach Notification Rules. Cadia Healthcare Facilities (Cadia) is a group of five providers that specialize in rehabilitation, skilled nursing, and long-term care services in Delaware. This settlement follows an OCR investigation of Cadia in which Cadia posted a “success story” of a patient to its public website without first receiving a valid HIPAA authorization from the patient. The success story post included PHI such as the patient’s name, their photograph, and information regarding their condition, treatment, and recovery. OCR’s investigation further revealed that, through their “success story” program, Cadia compromised the PHI of 150 total patients.

As we’ve covered again and again over the past five years, providers are once more facing the prospect of a telehealth “cliff” if Congress does not take action to extend the Medicare flexibilities for telehealth services that have been in place since March of 2020.  While news is focused on the pending government shutdown, providers and Medicare beneficiaries who have come to rely on the COVID-era waivers and other flexibilities that greatly increased the availability of telehealth are facing the prospect of significantly reduced access to virtual care as of October 1, 2025.  Here is a quick review of what telehealth providers and their patients stand to lose if Congress does not act to extend coverage: 

The PBM Policy and Legislative Update — Spring 2025 edition builds upon prior issues and summarizes activity from January through March (2025) that affects the PBM industry. It highlights federal activities, state activities, and other noteworthy events and trends affecting the PBM industry.

Over the past few years, Congress has attempted to pass “federal PBM reform.” Members of Congress have held numerous hearings related to PBMs and introduced numerous bills seeking to regulate PBMs (we regularly track these federal actions through our quarterly PBM Policy and Legislative Updates). Despite the rhetoric in Washington about bipartisan support to regulate PBMs, Congress has not been able to pass meaningful PBM reform.  This brings us to the One Big Beautiful Bill (Reconciliation Bill), which includes some PBM measures but remains  far from the sweeping reform Congress previously introduced and  from what we are seeing at the state level. The House passed the Reconciliation Bill on May 22, 2025, with a slim margin of 215 to 214.  The Reconciliation Bill will now move to the Senate, where the Senate will need to approve it with a simple majority for it to become law. 

Earlier this month, the Centers for Medicare & Medicaid Services (CMS) released its 2025 Marketplace Integrity and Affordability Proposed Rule (Proposed Rule), proposing a number of enrollment and eligibility policies impacting both Federal and State Exchanges. While CMS frames these policies as necessary to combat fraud and abuse, the impact will be a reduction in enrollment in the ACA Marketplace – with the Proposed Rule estimating that between 750,000 and 2 million fewer individuals enroll in health insurance plans on the Exchanges in 2026. 

This blog outlines the major provisions of the Proposed Rule, followed by a discussion of their potential impact on plans participating in the ACA Marketplace.

Read about clarification from CMS for Part D Sponsors implementing the IRA’s Medicare Prescription Payment Plan and Medicare Prescription Drug Inflation Rebate Program policies that took effect on January 1, 2025.

Mintz’s Pharmacy Benefits and PBM Contracting Practice is pleased to present the ‘Fourth Edition: Q1 2025’ of our Mintz IRA Update, a regular publication that delves into developments of the Inflation Reduction Act of 2022 (IRA) and their impact on pharmaceutical supply chain stakeholders.

The PBM Policy and Legislative Update — Winter 2025 edition builds upon prior PBM Policy and Legislative Updates and summarizes activity from October through December (2024) that affects the PBM industry. It highlights (i) federal activities, (ii) state activities, and (iii) other noteworthy events and trends affecting the PBM industry.

Building upon prior issues and summarizing activity from July through September, the Fall 2024 PBM Update highlights federal legislative activity and oversight, state legislative activity and oversight, and other noteworthy events and trends affecting the PBM industry.

Last week, Texas Attorney General Ken Paxton filed a complaint in federal district court against HHS and the Office for Civil Rights (OCR) challenging a recently issued rule strengthening protection of protected health information (PHI) related to reproductive health. As summarized in a previous post, the HIPAA Privacy Rule to Support Reproductive Health Care Privacy (Final Rule), generally prohibits disclosure or use of PHI by a covered entity or their business associate for purposes of criminal, civil, or administrative investigations into persons for seeking, obtaining, providing, or facilitating reproductive health care under lawful circumstances. In its complaint, Texas argues that the Final Rule is unlawful and seeks to have it vacated.