To partially address these challenges, federal law allows patients to request that insurers not send EOBs or conceal sensitive care in the EOBs. However, insurers aren’t obligated to honor these requests. Some states have taken further action to ensure patient confidentiality. Massachusetts’s PATCH Act, for example, requires insurers to send an EOB to the patient’s preferred address and hide sensitive details about care upon a patient’s request. Pennsylvania and New Jersey, unfortunately, do not offer this extra protection.