On 8 January 2025, the "New York Health Information Privacy Act" (S 929) was introduced to the Senate. The Bill seeks to establish regulations governing the collection, processing, and sharing of health-related data in New York. It defines regulated health information, mandates clear consent protocols for data use, and prohibits the sale of such information to third parties. The Bill outlines specific rights for individuals, including access to and deletion of their data, and requires businesses to implement strong security safeguards. Exemptions apply to health information governed by the Health Insurance Portability and Accountability Act, government entities, and data collected during clinical trials. Enforcement powers are granted to the Attorney General, who may impose penalties for violations. If enacted, the Bill will take effect one year after becoming law.
Original source