340B ESP and HIPAA Compliance | McDermott Will & Emery

340B ESP and HIPAA Compliance

Overview


Many pharmaceutical manufacturers currently require 340B covered entities to provide de-identified pharmacy claims data for dispensed 340B drugs to a third party, 340B ESP, as a condition of receiving discounts under the 340B program. Although the claims data may be de-identified in the hands of 340B ESP, pharmaceutical manufacturers can link the data to identifiable rebate transactions to determine if pharmacy benefit managers (PBMs) have obtained rebates for previously discounted medications. This re-identification of the data, which manufacturers have been transparent about, has caused some 340B covered entities to question the permissibility of the 340B ESP data submission under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Access the slides here.


Dig Deeper

New York, NY / McDermott Event / October 16, 2025

HPE NYC 2025

San Diego, California / McDermott Event / July 1, 2025

AHLA Annual Meeting Reception 2025

Nashville, TN / McDermott Event / May 6-9, 2025

McDermott HealthEx

Webinar / McDermott Webinar / March 13 – April 24, 2025

Countdown to McDermott HealthEx: Webinar Preview Series

Paris, France / McDermott Event / April 2, 2025

European Health & Life Sciences Symposium 2025

Get In Touch