On January 22, 2025, the New York Assembly passed Senate Bill S929, the New York Health Information Privacy Act (“the Act”). The Act seeks to enhance the protection of health information for New York residents, regulates health data not covered by HIPAA, and imposes strict requirements on entities handling health or wellness-related consumer data. Although the Act exempts HIPAA covered entities, it may still have implications for how covered entities collect, store, use, and disclose certain types of data.
