Understanding Privacy and Your Health Insurance

In 2018, Massachusetts passed the PATCH (Protecting Access to Confidential Health Care) Act. This law is designed to close a loophole in patient privacy by keeping your medical appointments, tests, and prescriptions private, even if you are not the primary person named on your insurance plan. The PATCH Act ensures that, if multiple people are on the same insurance plan, any confidential information is shared only with the patient.  

Why the PATCH Act Matters 

Whenever you receive care, even if the visit is fully covered and there is no bill, the insurance plan policyholder (subscriber) receives an Explanation of Benefits (EOB) document that lists what occurred. This often includes care related to sensitive topics and the names of laboratory tests. Insurance companies send EOBs because consumer protection laws often require them to notify policyholders when and how coverage was used. 

How to protect your privacy 

The PATCH Act allows you to notify your insurance company to change how you receive your EOB. Ways you can change your EOB include:  

  • Opting out of receiving an EOB if you don’t owe a balance

  • Asking that sensitive services not be listed

  • Changing the physical or email address where the EOB is sent

  • Requesting that the EOB go to the patient, not the policyholder. 

Note: If you wish to make any changes to your EOB, be sure to make those requests BEFORE your medical appointment. 

How to change your Explanation of Benefits: 

  1. Call the number on the back of your insurance card.

  2. Tell the agent your name and your policy number.

  3. Explain that you are covered under your parent/spouse/guardian’s health insurance policy and that under the Massachusetts PATCH Act you would like to change how you receive your Explanation of Benefits form.

  4. Provide the changes you would like to have happen (address, content on the EOB, etc…). Be prepared to provide the request in writing if asked to do so.

  5. Ask if you need to take any further action to process your request.

  6. Finally, request confirmation that your request has been processed.  

If I am on my parent’s insurance plan, could that also affect the confidentiality of my care?  

No. Office visits and laboratory test results are never shared with others without your consent. Your visits to MIT Health and the information you share with our providers are confidential. That means that every part of every visit is kept private. Unless you give us permission, we won’t share any of your health information with your parents, professors, advisors, or friends.  

Exceptions to this policy would be life-threatening situations or if you are under the age of 18.  

What if I want my parents to be involved in my healthcare? What if I don’t?  

If you do want your parents to be involved in your care at some point, just tell us. Speak with your provider directly and give them permission to speak with your parents about that specific issue. You can only give permission for a specific episode of care — it’s not blanket permission to discuss any of your other visits or medical issues. This permission expires when the specific episode of care is resolved or in six months if the concern is ongoing. If you want your parents involved again, you’ll need to provide permission again.