On the Horizon — Not Yet Law
New York Health Information Privacy Act (NYHIPA)
Would create a WA My Health My Data-style consumer health data law for New York if it clears this second attempt — worth monitoring closely given it's already reached the Governor's desk once more.
Status: The original bill (S929/A2141) passed both chambers in January 2025 but was vetoed by Gov. Hochul on Dec 19, 2025, who called its definitions and scope too broad. The revised S9269/A10357 — narrower in scope, with added carve-outs for data already covered by state and federal regulation, and without the prior 20%-of-revenue penalty — passed the Senate 48-13 on Jun 3, 2026 and the Assembly on Jun 4, 2026. As of Sep 11, 2026 the Senate record still shows "Passed Senate & Assembly" with no chapter number and no recorded gubernatorial action — the last entry remains the Jun 4, 2026 Assembly passage.
Not law yet — awaiting the Governor. The bill text provides it would take effect six months after becoming law.
This is a general reference, not legal advice or a determination that this law applies to your specific business. Run the full questionnaire to check against your actual revenue, data volume, and data types.