United States of America: Section 6 of the Privacy Protection Act (A6309) enters into force

On 1 February 2027, Section 6 of the Privacy Protection Act (A6309) enters into force, regulating the collection and sharing of personal information by health care facilities. The provisions prohibit health care facilities from requesting or collecting data related to immigration status, citizenship, place of birth, social security numbers, or individual taxpayer identification numbers, unless necessary for delivering health care services or assessing eligibility for public programs. These facilities are also prohibited from disclosing such information as a governmental record under the Open Public Records Act, except when required by law, subpoena, or valid court order. The Department of Health is responsible for enforcement.