State Privacy Laws, Data Security, Health Care Providers

New Texas Law Requires Storage of Electronic Health Records in U.S.

Sheppard Mullin Richter & Hampton LLP on 8/4/2025

Starting September 1, 2025, health care practitioners in Texas are required to store electronic health records in the United States under a new Act. This requirement is found in a recently enacted law that also includes...more

Montana Expands Health Care Privacy Law to Include Mental Health Digital Services

Orrick, Herrington & Sutcliffe LLP on 6/9/2025

The Montana Legislature recently passed an update to the state’s Uniform Health Care Information Act (the Act), which creates standards for privacy and security of health care information maintained by Montana health care...more

New York Passes Restrictive Health Information Privacy Act

McDermott Will & Schulte on 1/27/2025

On January 22, 2025, the New York Assembly passed Senate Bill S929, titled the New York Health Information Privacy Act (New York HIPA). The act is now on its way to Governor Kathy Hochul for her signature. If signed into...more

Navigating HIPAA and State Privacy Laws for Drug and Device Manufacturers

Gardner Law on 6/12/2024

The Health Insurance Portability and Accountability Act of 1996 as amended and implemented through regulations at 45 C.F.R. §§ 160 and 164 (“HIPAA”) regulates the privacy and security of health information. For drug and...more

Beyond HIPAA: What Businesses Need to Know as States Join Trend to Protect Consumer Health Data

Fisher Phillips on 8/14/2023

For decades, medical providers and other covered entities have satisfied their health-data privacy obligations by complying with the federal Health Insurance Portability and Accountability Act (HIPAA) — but this is changing...more

6 Things to Know About Washington’s My Health My Data Law

Orrick, Herrington & Sutcliffe LLP on 5/10/2023

The state of Washington recently enacted My Health My Data (“MHMD”), a game-changing new consumer privacy law focused on health data. MHMD establishes an expansive notice and consent regime for consumer health data with...more