Provides for the protection of health information

Latest action Dec 19, 2025

Provides for the protection of health information; establishes requirements for communications to individuals about their health information; requires either written consent or a designated necessary purpose for the processing of an individual's health information.

Not chosen yet

Where it stands

Rejected by the executive.

Introduced
In committee
Up for a vote
Passed one chamber
Passed
Enacted

Vetoed

New York State Senate

Same as A2141, the matching bill in the Assembly.

Amends the General Business Law.

Committee

Internet And Technology · New York State Senate

Purpose, from the sponsor's memo

This bill would govern companies that collect and sell healthcare infor- mation and provides additional rights and protections to users related to the sale and of their private health information.

Filed with the bill. Read it on nysenate.gov (opens in a new tab)

Recorded votes

Vote: Floor vote
NY SenateJan 21, 2025Result: passed
(49) (10) (0) (4)
Vote: Committee vote · Rules
Senate RulesJan 21, 2025Result: passed
(16) (3) (0) (2)

The sponsor's argument

Why Liz Krueger says this is needed

Most residents of the State are under the impression that. HIPAA protects them and their health data from being accessed by third parties and sold by and to other organizations. Residents are generally unaware that their technology is constantly tracking their movements, and geolo- cation data is being sold to companies for the purposes of targeted advertisements or tracking. Most users also do not have an understanding of how much information is being collected, stored, and sold for the benefit of third parties. For example, a mobile app to track menstrua- tion cycles was recently caught selling users' data to antiabortion advocacy organizations. This bill creates a legal framework for residents to reclaim and retain control of their healthcare information. Electronic apps or websites, that are designed to provide a diagnosis or retain health information will be required to receive affirmative consent by the user to retain such information and would provide users the ability to rescind such consent. The bill also provides a legal remedy for those whose data was improperly collected or used.

This is the sponsor's own case for the bill, quoted from their memorandum. It is not Agora's description of what the bill does.

Full history

Dec 19, 2025
Vetoed
VETOED MEMO.135
NY Senate
Dec 8, 2025
Sent to the executive
DELIVERED TO GOVERNOR
NY Senate
Jan 22, 2025
Ordered to Third Reading Rules CAL.60
ORDERED TO THIRD READING RULES CAL.60
NY Assembly
Jan 22, 2025
Passed a chamber
PASSED ASSEMBLY
NY Assembly
Jan 22, 2025
Reported out of committee
REPORTED REFERRED TO CODES
NY Assembly

Show full history (8 earlier events)

Jan 22, 2025
Substituted
SUBSTITUTED FOR A2141
NY Assembly
Jan 21, 2025
In committee
COMMITTEE DISCHARGED AND COMMITTED TO RULES
NY Senate
Jan 21, 2025
Sent to the executive
DELIVERED TO ASSEMBLY
NY Senate
Jan 21, 2025
Ordered to Third Reading CAL.101
ORDERED TO THIRD READING CAL.101
NY Senate
Jan 21, 2025
Passed a chamber
PASSED SENATE
NY Senate
Jan 21, 2025
Referred to committee
REFERRED TO SCIENCE AND TECHNOLOGY
NY Assembly
Jan 15, 2025
Referred to committee
REFERRED TO SCIENCE AND TECHNOLOGY
NY Assembly
Jan 8, 2025
Referred to committee
REFERRED TO INTERNET AND TECHNOLOGY
NY Senate

About this record

Summary: The summary comes from NY Open Legislation, the New York State Senate's public record. For more, see How we handle summaries.
Cosponsors: The list shows the cosponsors who are on Agora, A to Z. The official record may list more.
Party colors: Parties are shown in the same neutral colors.
Source: From NY Open Legislation, the NY Senate and Assembly, and official rosters. This record was last updated Oct 21, 2026. About our data

Read the record

Read on NY Senate (opens in a new tab) The official record on nysenate.gov.

Your position

Your position on this bill