Your state can changewho sees the paperwork.

State rules provide a clearer path to private claim communications.

California is one of the strongest states for STD testing privacy. AB 1184 requires health plans and insurers to route communications about sensitive services, including STI-related care, directly to the protected individual instead of the policyholder. You should still confirm your plan has your own mailing address, phone number, and portal settings before the visit.

State rules provide a clearer path to private claim communications.

New York requires health insurers to accommodate reasonable requests to receive claim-related information by alternative means or at alternative locations when disclosure could endanger the covered person. In plain English: ask your insurer for a confidential communications request before billing insurance.

A shared-plan EOB may be visible unless the insurer confirms an alternative route.

Texas does not have a broad California-style EOB suppression law for adult dependents. If STI testing is billed to a parent's or spouse's plan, the policyholder may see claim or EOB activity. A HIPAA confidential communications request is still worth making if disclosure could endanger you, but cash-pay or public clinic testing is usually safer for privacy.

Protection may depend on a written request, plan type, or patient circumstances.

Florida has a strong minor-confidentiality rule for sexually transmissible disease consultation, examination, and treatment, including not indirectly disclosing through a bill to a parent or guardian except as allowed by law. For adults and dependents using shared insurance, broad EOB privacy still depends heavily on the insurer and HIPAA confidential communications.

A shared-plan EOB may be visible unless the insurer confirms an alternative route.

Illinois does not appear to have a broad California-style dependent EOB suppression rule for STI testing. If a claim is billed to shared insurance, the policyholder may see claim activity. Use a HIPAA confidential communications request, but do not assume it is active until the plan confirms it.