Bill > A1401

Introduced Session

This bill exempts insurance-support organizations and national securities associations from the provisions of current law that require certain entities to notify consumers of collection and disclosure of personal data. Under current law, insurance institutions and other entities are exempt from those requirements. The bill exempts certain data from disclosure requirements under current law, including: (1) information treated like protected health information collected, used, or disclosed by a covered entity or business associate under the "Health Insurance Portability and Accountability Act of 1996" (HIPAA), when the information is used or disclosed in accordance with HIPAA and the information is afforded all the privacy protections and security safeguards of the federal laws and implementing regulations under HIPAA; and (2) human subjects research conducted in accordance with good clinical practice guidelines issued by The International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use. Finally, the bill expands the definition of de-identified data under current law to include data de-identified in accordance with the requirements in HIPAA, where any recipients of that data are contractually prohibited from attempting to reidentify the data.

AI Summary

Committee Categories

Cody Miller (D)*,  Ellen Park (D)*, 

Withdrawn Because Approved P.L.2025, c.367. (on 01/13/2026)

Official Document