The Gag Clause: The Contract Term That Kept You From Your Own Data
For most of my career, a self-funded employer could pay every claim and still be told it could not see the claims file. The reason was a gag clause: a line in the TPA, PBM, or network contract that kept the plan from getting or sharing its own cost, quality, and claims data.
Federal law ended that in December 2020. Section 201 of the Consolidated Appropriations Act, 2021 prohibits group health plans from agreeing to any term that restricts access to provider-specific cost and quality information, de-identified claims data, or the ability to share that data with a consultant or auditor.
There is a catch. The plan has to say so, every year. Each self-funded plan files a Gag Clause Prohibition Compliance Attestation with CMS by December 31. Your TPA or PBM can file for you, but only if it is in writing, and the responsibility stays with you as plan sponsor either way. Since 2025, the plan also answers for the agreements its vendors hold with networks and providers.
A few questions worth asking before December:
Who is filing our 2026 attestation, and do we have that in writing?
Have we read our TPA, PBM, and network contracts for language that limits our data?
Has any vendor confirmed that its downstream agreements are clean?
Where is last year’s confirmation?
If you cannot answer all four in a minute, that is the place to start.
Marsha Marrullier, REBC
Marsha-Marrullier@Leavitt.com
(727) 315-5211 / Cell (727) 385-1067