arrow_back Back to App

Expanding Health Data Privacy: New HIPAA-Like Rules for Tech Companies and Apps.

This Act extends federal health data privacy and security standards (similar to HIPAA) to technology companies and apps that collect your health information but are not traditional healthcare providers. It grants citizens new rights, such as the ability to request the deletion or portability of this data. Citizens will also receive clear warnings when their health data leaves the HIPAA-protected system, for instance, after sharing it with a fitness application.
Key points
Increased control over health data collected by apps and tech companies, including the right to delete and transfer that information.
Non-traditional healthcare entities must adopt strict security standards and report data breaches, similar to hospitals.
New notification requirements: Apps must warn that wellness data (e.g., step counts) is not HIPAA-protected and offer an opt-out option.
Establishes unified national standards for anonymizing health data used in research and Artificial Intelligence.
article Official text account_balance Process page
Introduced
Citizen Poll
No votes cast
Additional Information
Print number: 119_S_3097
Sponsor: Sen. Cassidy, Bill [R-LA]
Process start date: 2025-11-04