[Update: New York Governor Kathy Hochul vetoed S. 929 on December 19, 2025.]
New York State appears poised to become the fourth state to explicitly regulate consumer health data not covered by the federal Health Insurance Portability and Accountability Act (HIPAA). In May of 2023, Washington State enacted the My Health My Data Act; in June of 2023, Connecticut amended its Data Privacy Act; and in March of 2024, Nevada passed Senate Bill 370. In many respects, NY HIPA is broader in scope and effect than its three predecessors.
New York’s S929 (Health Information Privacy Act or NY HIPA), sponsored by state Senator Liz Krueger (D), establishes requirements for communications to individuals regarding the disposition of their health information; and requires written consent or a designated necessary purpose for the processing of such health information. NY HIPA addresses vulnerabilities unaddressed by HIPAA because it applies to a broader range of private companies and protects health information at risk of disclosure through the commercialization of health data.
Blog Editors
Recent Updates
- Federal Embryo Adoption Program Raises Potential Legal Questions for Reproductive Health
- Vermont’s H. 583 Restricts Private Equity and Hedge Funds with Ownership and Controlling Interests from Interfering with Clinical Judgment of Health Care Providers
- DOJ’s Second National Health Care Fraud Takedown of the Second Trump Administration Heavily Targets Medicaid Fraud
- FDA Regulations to Establish Minimum CGMP Requirements for Manufacturing, Packaging, Labeling, and Holding of Dietary Supplements
- OIG Advisory Opinion 26-14 Offers Another Favorable Path for Patient Access Through Sponsored Testing