Lexology January 31, 2023
With 2023 underway, healthcare providers have a more complex patchwork of privacy laws than ever before to navigate. Five states have enacted general privacy laws: California, Colorado, Connecticut, Utah, and Virginia. These laws include varying exemptions for protected health information (PHI), HIPAA de-identified information, healthcare providers, HIPAA covered entities, HIPAA business associates, and non-profits.
While all of the laws exempt PHI, healthcare providers may have obligations under these laws with respect to other personal information, such as employee information or website data.
To help healthcare providers navigate these laws, we have put together the following table:
* For purposes of the applicability threshold, we are assuming that healthcare providers do not derive 25% or more of their annual revenues from...