Section 2: Public disclosure of rates via machine-readable files
Health plans and issuers must make MRFs available to the public that contain provider pricing information for items and services that are covered under non-grandfathered plans in individual and group markets.
Under the regulation, service billing codes such as the Current Procedural Terminology code, Health Common Procedure Coding System code, Diagnosis-related Group code, or other common identifiers must be used to identify each item or service. The reported provider rates for each covered item and service must include all participating providers and their contract negotiated rates as well as their allowed amounts and billed charges paid to nonparticipating providers three to six months before the file publication date. Participating and nonparticipating rates must be reported in separate files.
This data must be reported in the specified machine-readable format that is detailed in the final ruling’s technical implementation guide and the data must be updated and published on a publicly accessible website each month.
To view HMSA’s machine-readable files, please click the link below:
hmsa.com/help-center/transparency-in-coverage-machine-readable-files/.
Frequently asked questions:
What is a machine-readable file format?
A machine-readable file is a digital representation of information that follows predefined rules that allow a computer system to import and analyze the files without human intervention.
Files created by HMSA are in JavaScript Object Notation (JSON) format and all other file requirements follow current technical implementation guide file schemas available on GitHub.
How large is a transparency MRF?
We’re expecting each HMSA-produced machine-readable file to remain under 1TB.
Who can use the data and for what purpose?
Anyone can use it, including consumers, researchers, employers, CMS, or other third parties. MRF data is mandated to be available to the public at no charge without any restrictions. HMSA doesn’t control this data.
What are the information technology requirements for transmitting files and posting MRFs?
CMS did not specify requirements or mechanisms to transmit or post files in the transparency final ruling or the MRF technical guide on GitHub. Organizations should seek internal technical guidance to determine the best solutions based on their needs and technical capabilities.
How does HMSA support compliance with monthly reporting requirements for MRFs?
HMSA provides compliant MRFs on hmsa.com for impacted health plans. These files follow technical requirements defined in the final rulings, including the latest available technical specifications (file schemas) on GitHub. We continue tracking with lawmakers and industry leaders to stay informed about changes to existing requirements and the latest industry standards for compliance with federal regulations.
Does HMSA have recommendations for users who are experiencing issues when accessing HMSA’s MRFs?
Yes. Every month, HMSA validates that our newly published MRFs are publicly accessible from various web browsers and endpoints. If you’re experiencing issues, we recommend taking the following actions:
- Clear browser cache and search history.
- Use the Incognito/Private Search mode for your web browser.
- Try a different web browser.
- Verify that your local device and web settings do not restrict downloads.
- Verify that URLs were copied and pasted to the web browser exactly as they were reported in the table of contents.
- Check your local folders where downloaded files are stored, as downloads may initiate without any notification.
Note: HMSA isn’t responsible for users’ local capabilities that could impact individual user’s experience when accessing MRFs, including issues with local hardware or network, browser settings, or storage capacity.
Can HMSA work directly with individual groups or third-party vendors on behalf of groups that wish to host MRFs on an alternate website and/or consolidate HMSA’s data with data from other sources?
Yes. It’s HMSA’s commitment and priority to ensure our good-faith compliance with MRFs in a manner that’s equitable to impacted stakeholders starting on the federally mandated enforcement date and monthly thereafter.
Based on the complexity and level of effort involved with this requirement, HMSA isn’t able to support individual partner requests in addition to our own efforts to meet this requirement. HMSA’s machine-readable file data is available to the public at no charge and without any restrictions as mandated. HMSA doesn’t control our data files and it may be used by anyone including consumers, researchers, employers, CMS, or other third parties. Anyone can access, use, consolidate, or host MRFs for applicable HMSA plans.
Does HMSA charge customers for creating the MRFs?
We don’t anticipate any administrative costs or fees associated with this mandate. However, we may assess fees in the future.
What is HMSA’s MRF record keeping and retention policy?
- HMSA backs up a minimum of 12 months of published files. If CMS offers specific guidance on retention policy requirements, we’ll adjust our retention period accordingly.
- Since files are hosted on Amazon Web Services servers, on-demand web reporting can be generated to inventory files that have been hosted, uploaded, and downloaded.
Are grandfathered health plans included in this requirement?
No. Grandfathered health plans are not in scope for the MRF requirement. Other plans or types of benefits not subject to the mandate include:
- Excepted benefits, such as standalone vision and dental plans.
- Flexible spending accounts, health reimbursement accounts, and health savings accounts.
- Medicare.
- Medicaid.
How can I stay updated on HMSA’s plans for MRFs?
Please continue visiting this site for updates on MRF. If you have any questions, contact your HMSA representative.
Section 3: Disclosure of personalized out-of-pocket costs
Updated as of April 2026.
The price comparison tool (cost tool) gives members access to their out-of-pocket costs and negotiated rates for covered health care items and services. Members can get the information by phone, on the website, or in print to compare copayments and coinsurance for items and services from participating providers.
Effective Jan. 1, 2023, insurers and plans were required to make the cost tool available to commercial plan members for 500 shoppable items and services identified in the rule.
Effective Jan. 1, 2024, they were required to include all covered items and services.
Frequently asked questions:
What does “all items and services” mean?
As of Jan. 1, 2024, the cost tool mandate requires inclusion of all items and services that are benefits of a member’s HMSA health plan, including routine office visits and virtual care, urgent and emergent inpatient and outpatient care, medical tests and labs, diagnostic imaging, durable medical equipment, therapies, and more.
How does HMSA provide applicable pricing information to members?
HMSA partnered with Sapphire Digital, part of Zelis Corp., to implement their S365 platform as our online self-service cost tool. Users can use the platform to search pricing estimates for common “shoppable” procedures and other covered items and services as well as compare pricing among providers. S365 is available to beneficiaries who have HMSA commercial plans.
If a member would like to request pricing information by phone, they can call HMSA Customer Relations.
How does HMSA provide members with a Notice of Disclosure or inform members that prior authorization or other medical policies may be required for a service?
This information is available on the online cost tool or by phone from HMSA Customer Relations.
What search capabilities does the cost tool have?
Members can search for covered items and services by:
- Billing code or descriptive term (e.g., rapid flu test).
- Provider or facility name or specialty.
- Categories of care (e.g., primary care services, women’s health, behavioral health, etc.).
- Members can filter their search or prioritize results based on cost, available providers’ specialties, gender, and/or geographic proximity (e.g., geolocation, city, state, ZIP code, or island and distance in miles).
Are these pricing tools available to applicable members?
Yes. Members have had access to transparency web-based pricing tool since Jan. 1, 2023.
Members can also request pricing and network guidance from HMSA Customer Relations by phone.
Where can I find the internet-based, self-service cost tool?
The cost tool can be found by logging into My Account and selecting Procedure Cost Estimator from the Benefits drop-down. Users who want to access S365 must have a registered member profile so they can be allowed to access personalized benefit information, such as out-of-pocket costs and deductibles.
What’s the benefit of offering a cost tool?
Access to a cost tool may enhance the consumer experience with these benefits:
- Enables members to evaluate health care options and make cost-conscious decisions.
- Reduces potential surprises regarding the individual member’s out-of-pocket costs for health care services.
- Potentially lowers overall health care costs by identifying the total cost of care, not only the member’s out-of-pocket expense.
- Using the cost tool before treatment should reduce the number of surprise bills after the member’s treatment.
It’s important to note that prices should never be used as the sole criterion for choosing a physician or any other health care professional. Priority consideration should be given to the quality of services delivered and/or the effectiveness of the intervention.
Why is there a difference in pricing among providers who offer the same service?
Providers’ negotiated rates vary due to multiple factors, including credentials and level of education, quality, access needs, network adequacy, resource utilization, setting of care, and more. HMSA works with providers to ensure that we’re providing our members with access to affordable, high-quality health care.
Section 4: Advanced Explanation of Benefits
Among the provisions of the CAA is the requirement of an Advanced Explanation of Benefits, (AEOB), for scheduled services that includes a patient’s information regarding network inclusion, contracted rate for a given item or service, out-of-pocket estimates, estimates of incurred amounts toward a patient’s deductible/cost-sharing limits, and information on medical management requirements.
Government agencies have deferred the effective date of the Advanced Explanation of Benefits mandate until further notice.
Section 5: Prescription Drug Data Collection (RxDC) report for Fully Insured Employer Groups
Updated as of April 2026.
The CAA (Section 204) requires health plans issuers to annually report prescription drug and health care spending information to the Tri-agencies. The report must include information such as premium amounts, number of members enrolled in a plan, and pharmacy rebates. The report is due annually on or before June 1.
Frequently asked questions:
Does HMSA submit the Prescription Drug Data Collection report to CMS on behalf of employer groups?
Yes. HMSA agrees to good-faith compliance with the Prescription Drug Data Collection reporting requirements to the extent that it places duties on the insurer. We continue to work closely with our pharmacy benefits manager (PBM) to submit the required information annually in a timely manner.
Which reports does HMSA provide on behalf of employer groups?
HMSA continues to submit all required reports to CMS on behalf of its employer groups.
For the reports that you’ll submit on behalf of employer groups, do you submit the entire report or are there portions of any report that the group must submit?
HMSA submits all portions of the report for information and data that HMSA possesses on behalf of employer groups.
What’s the estimated timing and process for data collection?
HMSA mailed a letter in mid-March with instructions to fill out an online survey for monthly premium amounts and group size. The survey period closed on April 23, 2026.
When will HMSA file the report?
Reports are due annually by June 1. HMSA will submit the report on or before this date.
Will HMSA provide employers with a copy of the report?
No. HMSA aggregates employer information by marketing segment and is unable to provide a copy of their report.
For the D2 file and premium cost share information, does HMSA report this information at the client level or is the information aggregated?
HMSA aggregates D2 data and premium cost share information by the following market segments consistent with CMS guidelines:
- - Individual.
- - Student.
- - Fully insured small group (50 employers or fewer).
- - Fully insured large group (51 employees or more).
- - Self-funded plans offered by large employers.
- - Federal Employees Health Benefits Program.
If the group has a separate PBM, what reports does HMSA provide?
For groups with a separate Pharmacy Benefit Manager, HMSA submits D1 Premium and Life-Years and D2 Spending by Category to CMS. On the Group Health Plan List report (P2), HMSA indicates that the group is included on HMSA’s D1 and D2 reports and that the group is not included on HMSA’s D3-D8 reports that require PBM-related information.
What group health plan name and group plan number does HMSA use for the report?
HMSA uses the group name and group number from our source processing system. We also use the employer EIN that the employer group provided. CMS has indicated that they’ll use this information to identify and attribute the report to the appropriate employer group.
When was the deadline to provide 2025 premium cost share information to HMSA?
Premium cost share information was due to HMSA via the CAA certification form by April 23, 2026.
If a group has additional questions about the premium cost share information collection process, what should they do?
Please refer to these FAQs for premium cost share information.
What issuer or TPA information does HMSA use for this report?
Hawaii Medical Service Association.
EIN: 99-0040115.
How will an employer know that HMSA submitted the report?
Visit hmsa.com/employers/caacertification to view HMSA’s CAA Certification submission confirmation receipt after June 1 annually.
Does HMSA provide written confirmation that they’ll comply with Transparency in Coverage rules?
No written confirmation will be provided since, pursuant to 12.1 of the fully insured employer Group Plan Agreement, HMSA has agreed to comply with applicable laws, which we believe doesn’t require written confirmation.
Section 6: Air Ambulance Reporting
Updated as of May 2025.
The CAA No Surprises Act (Section 106) requires air ambulance providers, insurance companies, and employer-based health plans to submit information to federal regulators about air ambulance services provided to consumers. CMS will collect data to develop a public report on air ambulance services.
Frequently asked question:
Will HMSA submit this report on behalf of fully insured employer group plans?
We’re awaiting final rules and/or guidance relating to the air ambulance reporting requirement from federal agencies. HMSA intends to fully comply with the requirements once they’re published. We will contact employer groups if information is required.
Section 7: Gag Clause Prohibition Compliance Attestation
Updated as of December 2025.
Section 201 of the CAA prohibits group health plans and health insurance issuers from entering into an agreement with a provider, network or association of providers; third-party administrator; or other service provider offering access to a network of providers that would directly or indirectly restrict the plan or issuer from:
- Sharing such information consistent with applicable privacy regulations.
Group health plans and health insurance issuers must annually submit an attestation of compliance with these requirements to CMS.
Frequently asked questions:
What is a “gag clause”?
- A contract term that restricts specific data and information that a plan or issuer can make available to another party. Gag clauses may be found in agreements with providers, TPAs, or service providers offering access to a provider network are prohibited under the Consolidated Appropriations Act of 2021.
What is the due date for the Gag Clause Prohibition Compliance Attestation?
- The submission window closed on Dec. 10, 2025. HMSA submitted the attestation for 2025. You may view the submission receipt here [PDF].
Does HMSA complete the attestation on behalf of fully insured employer group plans?
- Yes, HMSA submits the attestation on behalf of its fully insured employer groups.
What is an ERISA Plan ID number?
- The Employee Retirement Income Security Act (ERISA) Plan ID is a three-digit number used by the Department of Labor and the IRS to identify one employee welfare plan from another of a company’s benefit offerings.
How can I tell if my group/account is an ERISA Plan?
- Generally, your group health plan is governed by ERISA if you file a Form 5500 with the Department of Labor. You can also check with your accounting, finance, and/or legal departments.
Where can I find my ERISA three-digit plan number?
- It can be found on the plan’s Form 5500, which is filed with the Department of Labor.
What is a Form 5500 and who is required/exempt from filing it?
- You can find more information about Form 5500 at the Department of Labor website and also on the ADP website. Please check with your finance/accounting/legal department to confirm your group’s status.
What is a federal Employee Identification Number?
- An employer identification number (EIN) is a nine-digit number assigned by the IRS. The IRS uses the number to identify taxpayers who are required to file various business tax returns.
Where can I find my HMSA group number?
- Please refer to the letter you received from HMSA regarding the Gag Clause Compliance; your group number is on the upper right-hand side under “Your immediate action is needed.”
My ERISA group account has multiple federal EINs. Do I have to submit information for all of them?
- Yes, please submit a separate entry for unique EIN that is associated with your account.
- If you have multiple ERISA plan numbers, please only select and submit one.
What will happen if I didn’t submit my group health plan information to HMSA?
- HMSA will submit your group health plan with the information we currently have in our system, but it may be incomplete.
My account is no longer active with HMSA. Why am I receiving this letter?
- You’re receiving this letter because your group(s) were enrolled in a HMSA health plan in 2024-25 (even though the plans have since been canceled) and therefore falls into the date parameters set by CMS.
How will an employer know that HMSA submitted the attestation?
- Visit hmsa.com/employers/caagagclause/ to view HMSA’s Gag Clause submission confirmation receipt after Dec. 31.
What issuer information will HMSA use for this report?
- Hawaii Medical Service Association
EIN: 99-0040115
Will HMSA provide written confirmation that they’ll comply with Consolidated Appropriations Act for Gag Clause Prohibition Compliance Attestation?
- For fully insured employer groups pursuant to 12.1 in the Group Plan Agreement, HMSA has already agreed to comply with applicable laws, which we believe doesn’t require written confirmation.