Lexology February 26, 2025
If enacted, the New York Health Information Privacy Act (“NYHIPA”) will be the latest in a series of state privacy laws that regulate health data outside of the traditional health care context. It would follow the passage of similar laws in Connecticut, Maryland, Nevada, and Washington, but is markedly broader in scope and more restrictive in regulating how such health data can be processed. NYHIPA’s departures from existing legislative approaches to consumer health privacy regulation would complicate compliance strategies for entities subject to Washington’s My Health My Data Act (“WAMHMDA”) and its progeny, as well as bring new types of entities under its scope.
In a move to bolster reproductive health privacy, the New York legislature recently passed the NYHIPA...