AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
U.S. Health Data Privacy Reform
Coverage from Ai Data News, Epstein Becker Green, and others
Federal health-data reform concerns how privacy and security rules should apply as health information is collected by both healthcare providers and consumer technologies.
The Health Information Privacy Reform Act, S. 3097, proposes protections for data held by apps, wearables, and other services outside HIPAA, including access and deletion rights, limits on data use, and breach-notification standards. Separate cybersecurity legislation focuses on safeguards and incident response for HIPAA-regulated organizations. HHS and the FTC are central to the proposed privacy rules, while the scope of protections, enforcement, and agency rulemaking are important policy questions.
Looking Back
214 Day Timeline
Mar 16
Apr 13
May 18
Jun 15
Jul 13
Aug 17
Sep 14
All Articles17 articles
Important
The Senate HELP Committee advanced the Health Information Privacy Reform Act in Washington on August 7, 2026, extending proposed federal protections to consumer health data services.
9/18/2026 • Regulation, Law & Enforcement • General
On September 9, 2026, the U.S. Federal Trade Commission rescinded expanded Health Breach Notification Rule guidance for non-HIPAA health apps and connected devices.
9/11/2026 • Regulation, Law & Enforcement • General
Senator Bill Cassidy's S. 3097 advanced in the Senate health committee on July 30, proposing federal privacy rights for health data held by consumer apps.
9/4/2026 • Regulation, Law & Enforcement • General
State lawmakers in Washington, Nevada, California, and other U.S. states are expanding consumer health data protections beyond HIPAA for digital health businesses during the 2020s.
8/31/2026 • Regulation, Law & Enforcement • General
The National Partnership for Women & Families identified persistent United States health privacy risks in modern consumer technologies, data brokerage, surveillance, and breaches decades after HIPAA's enactment.
8/17/2026 • Regulation, Law & Enforcement • General
The Senate HELP Committee advanced Senator Bill Cassidy's HIPRA on July 30, 2026, in Washington, D.C., expanding proposed federal protections for consumer health data.
8/13/2026 • Regulation, Law & Enforcement • General
The Senate HELP Committee advanced S. 3097 in Washington on July 30, directing future HHS rules for consumer health data held by apps and wearables.
8/1/2026 • Regulation, Law & Enforcement • General
The Center for Democracy & Technology supported S. 3097's amended health privacy protections during Senate HELP Committee markup in Washington, United States.
7/31/2026 • Regulation, Law & Enforcement • General
The Senate HELP Committee advanced S. 3097 in Washington this week, directing HHS and the FTC to create standards for health data outside HIPAA coverage.
7/31/2026 • Regulation, Law & Enforcement • General
Washington enacted the My Health My Data Act in 2023, effective in 2024, requiring businesses serving Washington residents to protect consumer health data beyond HIPAA's coverage.
8/3/2026 • Regulation, Law & Enforcement • General
New York, through a revised NYHIPA proposal, would restrict health data sales and require authorization, notices, and consumer deletion and access rights starting as early as December 2026.
6/23/2026 • Regulation, Law & Enforcement • General
Senate HELP Committee advances the Health Care Cybersecurity and Resiliency Act of 2026 to strengthen HIPAA regulated entities' cybersecurity and breach response.
3/16/2026 • Regulation, Law & Enforcement • General
U.S. health institutions, businesses, and government agencies continue exchanging health information as expanding data collection exposes limits in HIPAA protection and anonymization.
8/17/2026 • Personal Data & Identity • General
Interesting
Senator Liz Krueger reintroduced New York HIPAA protection legislation in February to limit third-party monetization of sensitive health data as reproductive care restrictions drive cross-border targeting using health and location information.
3/26/2026 • Consumer Privacy & Digital Rights • General
The Federal Trade Commission recently unanimously rescinded its health breach notification policy in the United States, reducing reporting requirements for health and fitness apps.
9/10/2026 • Regulation, Law & Enforcement • General
The Federal Trade Commission unanimously rescinded its 2021 health app breach notification policy in the United States after commission membership changes and new deregulation guidance.
9/9/2026 • Regulation, Law & Enforcement • General
The Federal Trade Commission rescinded its 2021 health breach policy statement in the United States after a 2024 rule update expanded coverage to health apps and connected devices.
9/9/2026 • Regulation, Law & Enforcement • General