AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
New York Health Data Privacy Bill
Coverage from Mondaq, JD Supra, and others
New York is ફરી trying to pass a consumer health privacy law that would tightly restrict how companies collect, use, and sell regulated health information outside HIPAA.
The revised bill keeps an authorization-first model, broad consumer rights, and attorney general enforcement, while trimming some penalties and expanding narrow exceptions. It matters because the proposal would set a stricter state-level standard for health-related data shared by apps, platforms, and other non-HIPAA businesses.
The revised account adds concrete compliance details: enforcement penalties are capped at $15,000 per violation with no private lawsuit option, while limited product-development exceptions and retention limits are specified. It also identifies named supporters and opponents and places greater emphasis on reproductive and gender-affirming care data risks.