Lexology January 31, 2025
A bill on New York Governor Kathy Hochul’s desk poses significant compliance challenges for businesses in the insurance sector.
On January 22, 2025, the New York legislature passed the New York Health Information Privacy Act, a sweeping bill aiming to protect health information not covered by the Health Information Portability and Accountability Act. Resembling the Washington My Health My Data Act, the bill is expansive in scope, applying to “regulated health information,” or “any information that is reasonably linkable to an individual, or a device, and is collected or processed in connection with the physical or mental health of an individual.” The definition specifies that “any inference drawn or derived about an individual’s physical or mental health that is reasonably...