Health Data Access, Transparency, and Affordability Act of 2026

“(D) No contract or arrangement for services, and no extension or renewal of such a contract or arrangement, between a group health plan (as defined in section 733(a)) and any other entity, including a health care provider (including a health care facility), network or association of providers, service provider offering access to a network of providers, third-party administrator, or entity providing pharmacy benefit management services, is reasonable within the meaning of this paragraph unless such contract or arrangement—

“(i) allows the group health plan to audit all de-identified claims and encounter information or data described in section 724(a)(1)(B), provided that such information or data has been deidentified in accordance with section 164.514 of title 45, Code of Federal Regulations (or successor regulations), to—

“(I) ensure that such entity complies with the terms of the plan, the terms of the contract or arrangement for services, and the requirements of this title; and

“(II) determine the reasonableness of compensation received by such entity; and

“(ii) does not—

“(I) unreasonably limit the number of audits permitted during a given period of time;

“(II) limit the number of de-identified claims and encounter information or data that the group health plan may access during an audit;

“(III) limit the disclosure of pricing terms for value-based payment arrangements or capitated payment arrangements, including—

“(aa) payment calculations and formulas;

“(bb) quality measures;

“(cc) contract terms;

“(dd) payment amounts;

“(ee) measurement periods for all incentives; and

“(ff) other payment methodologies used by an entity, including a health care provider (including a health care facility), network or association of providers, service provider offering access to a network of providers, third-party administrator, or entity providing pharmacy benefit management services;

“(IV) limit the disclosure of overpayments and overpayment recovery terms;

“(V) limit the right of the group health plan to select an auditor;

“(VI) otherwise limit or unduly delay by greater than 60 calendar days after the date of request the group health plan from auditing any such de-identified claims and encounter information or data; or

“(VII) permit the entity to charge a fee beyond the reasonable direct costs to provide the required information and otherwise comply and assist with an audit request.”

“(14) In the case of an agreement between a group health plan and a health care provider (including a health care facility), network or association of providers, service provider offering access to a network of providers, third-party administrator, entity providing pharmacy benefit management services, or other service provider that violates the provisions of section 724, the Secretary may assess a civil penalty against such provider, network or association of providers, service provider offering access to a network of providers, third-party administrator, entity providing pharmacy benefit management services, or other service provider in the amount of $10,000 for each day during which such violation continues. Such penalty shall be in addition to other penalties as may be prescribed by law.”

“(6) by the Secretary to collect any civil penalty that the Secretary has imposed or assessed pursuant to this title;”

“(d) Attestations relating to group health plan data—Notwithstanding subsection (a) of this section, the Secretary shall collect the attestations required to be submitted under section 724(a)(3). The Secretary shall ensure that any service provider submitting such an attestation on behalf of a group health plan does not have any conflicts of interest with regard to such attestation.”