Senate voted 50-48 to kill your broadband internet privacy...

[RealityChik]

21. Federal HIPAA laws mandate otherwise...

Except for tightly restrictive HIPAA exceptions, usually only allowing 3rd party access to services specifically related to treatment covered by your insurance. Otherwise your WRITTEN permission is required.

Any optional permissions are required to default to OPT OUT, unless you choose to opt in. Not the reverse.

I went to this website for an abbreviated plain English interpretation of the law, without the heretofores and pursuant tos in the official legal-speak version of the law.

https://evisit.com/hipaa-guide/

So, I'd be holding your insurance company accountable if they have convinced you otherwise. The HIPAA laws are a slog to read through, but HIPAA patient information sharing is pretty restrictive. I'm no expert, but my husband was on a complience committee for a Blue Cross affiliate when HIPAA first came out and I got more than an earful of rants about its restrictive access and required permissions in order to to provide or recommend treatment related products by 3rd party providers.

Anyway, worth checking out. Insurance companies are notorious for pushing against legal requirements to see how much they can get away with. Best of luck with that. Gotta hold ther feet to the fire sometimes to make sure they behave with your best interest in mind.