340B ESP and HIPAA Compliance | McDermott Skip to main content

340B ESP and HIPAA Compliance

340B ESP and HIPAA Compliance

Overview


Many pharmaceutical manufacturers currently require 340B covered entities to provide de-identified pharmacy claims data for dispensed 340B drugs to a third party, 340B ESP, as a condition of receiving discounts under the 340B program. Although the claims data may be de-identified in the hands of 340B ESP, pharmaceutical manufacturers can link the data to identifiable rebate transactions to determine if pharmacy benefit managers (PBMs) have obtained rebates for previously discounted medications. This re-identification of the data, which manufacturers have been transparent about, has caused some 340B covered entities to question the permissibility of the 340B ESP data submission under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Access the slides here.


Registration Information

12:00 – 1:00 pm EST

Dig Deeper

London / In-person / September 24, 2026

HPE Europe 2026

Brussels, Belgium / Speaking Engagements / May 21, 2026

EU Pharmaceutical Law Forum 2026

Nashville, TN / In-person / May 20 - 21, 2026

McDermott HealthEx 2026

San Francisco, CA / In-person / April 30, 2026

Health Tech Investment Forum 2026

Orlando, FL / Speaking Engagements / April 23 – 24, 2026

NAMCP 2026 Spring Managed Care Forum

Miami, FL / In-person / March 4-5, 2026

HPE Miami 2026

Get In Touch