Despite changes, crisis pregnancy centers still attract scrutiny over HIPAA promises

The report details HHS’s confirmation that crisis pregnancy centers (CPCs) are not covered by HIPAA, ongoing instances of CPCs misrepresenting HIPAA compliance, and growing pressure from privacy and reproductive-rights advocates for state attorneys general to curb misleading practices. It examines Heartbeat International’s role in advising affiliates, its data-retention guidance, and its Next Level platform—highlighting a reported exposure of client information—while noting a New Jersey investigation and the broader post-Dobbs risks posed by unregulated collection and sharing of sensitive reproductive data.