On January 22, 2025, the New York Legislature approved the Health Information Privacy Act (NY HIPA), introducing significant new obligations for entities handling consumer health-related data.
- Entities must obtain written consent or have a strictly necessary reason to process regulated health information.
- NY HIPA does not regulate PHI under HIPAA but covers personally identifiable consumer health data.
- Patients will gain new rights to access and request modifications to their regulated health information.
- The bill is currently on Governor Kathy Hochul’s desk awaiting her signature for official adoption.
Bochner is closely monitoring this development.
Stay tuned for further updates on navigating these new obligations.
