As I understand it the EOB is protected under the TPO provision of HIPAA, however since the subscriber has authority to provide coverage to the dependent then having access to EOB reviews is critical for the subscriber to be able to monitor the dependents records against against identity theft or fraud.