25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

OCR Rescinds 2022 Guidance on Gender Affirming Care

Following President Trump’s Executive Order 14187 – Protecting Children from Chemical and Surgical Mutilation – the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has rescinded its previously issued guidance on gender affirming care – HHS Notice and Guidance on Gender Affirming Care, Civil Rights, and Patient Privacy.

The Executive Order put an end to the United States funding, sponsoring, promoting, assisting, and supporting the transitioning of children from one sex to another, with President Trump committing to rigorously enforcing all laws that prohibit or limit gender transitioning procedures. President Trump also issued Executive Order 14168 – Defending Women from Gender Ideology Extremism and Restoring Biological Truth to the Federal Government – which made it the policy of the United States to only recognize two sexes – male and female. The rescinding of previous OCR guidance on gender affirming care aligns with both of those Executive Orders.

The OCR guidance was issued in March 2022 under the Biden administration, confirming that the HHS recognized that medically appropriate and necessary gender affirming care improved mental and physical health outcomes for minors. The guidance sought to ensure that minors could access gender affirming care without discrimination. OCR stated in the guidance that it would enforce Section 1557 of the Affordable Care Act, which prohibits discrimination of sexual orientation and gender identity in health programs and activities that receive funding from the HHS.

The 2022 guidance also reminded HIPAA-regulated entities that HIPAA prohibits the disclosure of protected health information related to gender affirming care without a valid authorization from a patient except in limited circumstances (for treatment, payment, or healthcare operations), and that the HIPAA Privacy Rule permits, but does not require, disclosures of PHI related to gender affirming care when required by another law. On February 20, 2025, OCR, under the leadership of Acting OCR Director Anthony Archeval, officially rescinded the 2022 guidance. Archeval also said OCR will be issuing new guidance protecting whistleblowers who take action related to ensuring compliance with the order.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

“Today’s rescission provides important notice to the regulated community that the 2022 OCR Notice and Guidance no longer represents the views or policies of HHS OCR,” said Archeval. “The rescission is a significant step to align civil rights and health information privacy enforcement with a core Administration policy that recognizes that there are only two sexes:  male and female.”

While the 2022 guidance has been rescinded, the Final Rule issued by the Biden administration to strengthen reproductive healthcare privacy – HIPAA Privacy Rule to Support Reproductive Healthcare Privacy – established a broad definition of “reproductive health information”, which can include data related to gender affirming care. The Reproductive Healthcare Privacy final rule remains in effect.

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist