(a) A covered entity must not, in providing or administering health insurance coverage or other health-related coverage, discriminate on the basis of race, color, national origin, sex, age, disability, or any combination thereof.

(b) A covered entity must not, in providing or administering health insurance coverage or other health-related coverage:

(1) Deny, cancel, limit, or refuse to issue or renew health insurance coverage or other health-related coverage, or deny or limit coverage of a claim, or impose additional cost sharing or other limitations or restrictions on coverage, on the basis of race, color, national origin, sex, age, disability, or any combination thereof;

(2) Have or implement marketing practices or benefit designs that discriminate on the basis of race, color, national origin, sex, age, disability, or any combination thereof, in health insurance coverage or other health-related coverage;

(3) Deny or limit coverage, deny or limit coverage of a claim, or impose additional cost sharing or other limitations or restrictions on coverage, to an individual based upon the individual's sex assigned at birth, gender identity, or gender otherwise recorded;

(4) Have or implement a categorical coverage exclusion or limitation for all health services related to gender transition or other gender-affirming care;

(5) Otherwise deny or limit coverage, deny or limit coverage of a claim, or impose additional cost sharing or other limitations or restrictions on coverage, for specific health services related to gender transition or other gender-affirming care if such denial, limitation, or restriction results in discrimination on the basis of sex; or

(6) Have or implement benefit designs that do not provide or administer health insurance coverage or other health-related coverage in the most integrated setting appropriate to the needs of qualified individuals with disabilities, including practices that result in the serious risk of institutionalization or segregation.

(c) Nothing in this section requires coverage of any health service where the covered entity has a legitimate, nondiscriminatory reason for denying or limiting coverage of the health service or determining that such health service fails to meet applicable coverage requirements, including reasonable medical management techniques such as medical necessity requirements. Such coverage denial or limitation must not be based on unlawful animus or bias, or constitute a pretext for discrimination. Nothing in this section is intended to preclude a covered entity from availing itself of protections described in §§ 92.3 and 92.302.

(d) The enumeration of specific forms of discrimination in paragraph (b) of this section does not limit the general applicability of the prohibition in paragraph (a) of this section.