Short answer: Mostly no. On June 18, 2025, a federal court in the Northern District of Texas vacated most of the 2024 rule, including the reproductive-health statements in the privacy notice; the eCFR still prints the text, so do not rely on it alone.
The April 2024 rule (89 Federal Register 32976) restricted disclosures of PHI about lawful reproductive health care for investigations, and required attestations for certain requests. In Purl v. U.S. Department of Health and Human Services, No. 2:24-cv-00228-Z (N.D. Tex. June 18, 2025), the court declared most of it unlawful and vacated it. HHS’s own page states the vacatur and says the agency will decide next steps.
For notices of privacy practices, only the vacated paragraphs (b)(1)(ii)(F), (G) and (H) of 164.520 fell away. The other notice changes made in 2024 remain, with a February 16, 2026 compliance date.
Watch-out: the electronic Code of Federal Regulations still shows the reproductive-health provisions, because a court vacatur does not automatically rewrite the printed text. Check HHS’s page before acting on them, and expect a plan’s vendor templates to vary.