March 11, 2025 - 13:33
New York lawmakers have recently enacted comprehensive legislation aimed at enhancing health information privacy. This new bill mandates that entities must secure explicit consent from individuals before collecting, using, or selling their health information, with certain exceptions outlined for specific purposes.
One of the most significant aspects of this legislation is its broad definitions of both the entities that fall under its regulation and the types of health information that are protected. This expansive approach means that a wide range of organizations, including those that may not traditionally view themselves as handlers of sensitive health data, could be affected by these new requirements.
As a result, companies operating on a national scale may need to reassess their data practices to ensure compliance with New York's stringent privacy standards. This legislation marks a notable shift in the landscape of health information privacy, reflecting growing concerns about data protection and individual rights in the digital age.
