The next time patients log into the near-universal online health portal MyChart, they will be pushed to sign away their ability to sue the parent company if it mishandles their sensitive health information.

Epic Systems — the largest electronic health records company in the country and owner of MyChart — is rolling out a new terms-of-service agreement that includes binding arbitration language and a class-action waiver. These clauses compel patients to forfeit their legal right to band together in class-action lawsuits and instead direct them into a private court system, known as arbitration, where they face slim chances of winning their cases.

The new MyChart terms-of-service update comes at a time when the nation’s largest health insurance company, UnitedHealth Group, is facing numerous class-action lawsuits from consumers and physicians for a 2024 ransomware attack resulting in a massive breach of patient data. By slipping these new clauses into its terms of service, Epic could be attempting to avoid the same onslaught of litigation if it faces its own data breach or internal malfunctions, which large-scale institutions are particularly susceptible to.