Your privacy, by state

Can my parents see my
STD test on insurance?

It depends on your state and your insurer. About 10 states have laws that let you require sensitive services like STI testing to be kept off the policyholder’s Explanation of Benefits (EOB) — usually by submitting a confidential communications request. The rest leave it up to the insurer. Here’s a state-by-state overview, but always verify with your insurer before relying on it.

States with stronger EOB protections

In most of these states you still need to submit a confidential communications request (CCR) to your insurer — it isn’t silent or instant. Confirm timing and process with your plan.

CaliforniaAB 1184

Effective July 2022. Plans must direct communications about sensitive services to the patient — typically after a confidential communications request is submitted.

New YorkChapter 554

Insurer must honor a confidential communications request for sensitive services; no reason required.

WashingtonSB 5889

Insurers must honor confidential communication requests for sensitive services.

OregonORS 743A.064

Patient can request EOBs not be sent to the policyholder for sensitive services.

ColoradoHB 19-1004

Provides confidentiality protections on EOBs for sensitive services on request.

MarylandHB 812

Insurers must honor requests for confidential communications.

New JerseyState statute

EOB confidentiality protections available on request for sensitive services.

Partial protection

Connecticut

Protections for dependents 18+. Contact your insurer for specifics.

Illinois

Some protections exist, narrower than CA/NY. HIPAA-adjacent.

Massachusetts

Protections exist but less explicitly codified for STDs.

States without specific EOB-protection statutes

In states like Texas, Florida, and many Southern and Midwestern states, there isn’t a state law guaranteeing EOB suppression — so the policyholder may see STI testing on their insurance statement. Some insurers will honor a confidential communications request anyway under HIPAA §164.522(b), but it’s discretionary. Routes that avoid an insurance claim altogether:

Free public health clinic

Public clinics typically don’t bill insurance, so no EOB is generated. The clinic still keeps its own medical record. Often free or sliding-scale.

Cash-pay lab ($39+)

Cash-pay routes (e.g., Labcorp OnDemand from $39 for CT/GC) don’t generate an insurance claim or EOB. Payment, email, and pharmacy records still create a paper trail.

At-home kit ($99+)

Providers like LetsGetChecked and Everlywell ship to your address. No insurance claim, but shipping, packaging, and account records still exist.

If you’re under 18

Per the Guttmacher Institute, all 50 states and DC allow minors to consent to STI services on their own — though some states impose age minimums (often 12 or 14) and a few permit a clinician to notify a parent at their discretion. In California, Family Code §6926 lets anyone 12 or older consent to STI care, and the clinician generally can’t disclose the visit to a parent without the minor’s written authorization. If a parent uses the same insurance plan, separate billing-confidentiality steps may still be needed to keep the visit off an EOB.

CA Family Code §6926 · Guttmacher Institute state-law database (verify your state)

Legal information citing specific state statutes. Not legal advice. Laws change. Verify current law through official state sources.