Lexology January 29, 2025
New York lawmakers have passed a groundbreaking health privacy bill, the New York Health Information Privacy Act (NYHIPA or the Act), which could significantly redefine how entities handle health-related data. The Act, which is awaiting Gov. Kathy Hochul’s signature, imposes strict requirements on “regulated entities” processing “regulated health information” (RHI) linked to New York residents or individuals physically present in New York. If signed into law, the Act will take effect one year later.
What Is RHI?
The Act’s expansive definition of RHI includes any data reasonably linkable to an individual or device and collected or processed in connection with an individual’s physical or mental health, such as location and payment details, while excluding properly deidentified information.
What Entities Are...
Today's Sponsors
Today's Sponsor