The U.S. Department of Health and Human Services (HHS), through the Centers for Medicare & Medicaid Services (CMS), has finalized a new rule establishing national standards for health care claims attachments and electronic signatures. The rule was issued on March 20, 2026, and will be published in the Federal Register on March 24, 2026.

This rule introduces, for the first time, standardized requirements under HIPAA for the secure electronic submission of supporting documentation for health care claims, including medical records, imaging, clinical notes, telehealth documentation, and lab results.

It also establishes standards for secure electronic signatures to ensure document integrity and improve identity verification through the Health Level Seven® (HL7®) Digital Signatures Guide. 

These updates are designed to reduce administrative burden by replacing manual processes such as faxing and mailing, improving efficiency for providers and payers, and supporting better patient care.

Compliance Requirement:
Covered entities must comply with the new standards within 24 months of the rule’s effective date, May 19, 2028.

For more information, please refer to:

• Federal Register publication
• Final Rule Fact Sheet.
• https://www.cms.gov/priorities/key-initiatives/burden-reduction/administrative-simplification/hipaa/events-latest-news.

Source: CMS Newsroom, 03/20/2026

Get the latest news about Administrative Simplification. Sign up for CMS Administrative Simplification Email Updates

Michele Krpata, BSW, CPC, CPMA

Compliance Officer, Quality Reporting Analyst