Executive Order 13181: To Protect the Privacy of Protected Health Information in Oversight Investigations
President: Bill Clinton
Restricted federal reuse of protected health information obtained in health-oversight investigations.
Status: In effect. Is Executive Order 13181 still in effect? Yes. Executive Order 13181 remains in effect. See Federal Register record.
What does Executive Order 13181 do?
EO 13181 bars federal agencies from using protected health information obtained through a health-oversight activity against the individual in an unrelated civil, criminal or administrative matter unless a designated senior official approves the use. It also requires reasonable safeguards and limits redisclosure. The Justice Manual continues to cite the order for derivative-use approval in health-care-fraud work.
Claim-level review October 2, 2026: EO 13181 concerns specified health information obtained during health-oversight investigations and its later use in unrelated matters. It is not a substitute for the HIPAA Privacy Rule, and its text creates no privately enforceable right.
Before and after
Before the order
HIPAA rules controlled disclosures by covered entities but did not comprehensively restrict every later federal investigative use.
After the order
Executive agencies gained a government-wide safeguard against unrelated derivative use without senior approval.
Who had to do what
| Agency / office | Action | Timing / position |
|---|---|---|
| Federal oversight agencies | Protect covered information and limit unrelated use | Continuing |
| Deputy Attorney General and counterparts | Approve exceptional derivative use | Case-specific |
| Agency heads | Issue implementation procedures and safeguards | Continuing |
What happened next
EO 13181 established the restrictions.
Most HIPAA Privacy Rule requirements became enforceable.
Signed text, official disposition and the cited later implementation records for EO 13181 rechecked.
Legal and source detail
How it works legally
The scope turns on the order’s definitions of protected health information, health oversight and unrelated action. Statutory privacy and disclosure rules may independently prohibit or permit use.
Sources by type
If a source is unavailable, first check the cited publisher or another official repository. The cited publisher remains the authority.
Primary and official sources
Orders, laws, court records and official implementation material.
- GovInfo — EO 13181 (opens in a new tab) Order text
- Justice Manual — health-care fraud (opens in a new tab) Official record
- eCFR — HIPAA Privacy Rule (opens in a new tab) Agency rule
- National Archives — 2000 disposition table (opens in a new tab) Official record
How we checked this
Last checked against the sources above on October 2, 2026. How we research →