New York bill seeks to block health data sales without consent
A New York bill aims to stop companies from collecting or selling health data without explicit consent. The proposed law, reintroduced in February, would impose fines of up to $15,000 for violations. Supporters argue it is necessary to protect sensitive information, especially as abortion and gender-affirming care face growing restrictions nationwide.
Since Roe v. Wade was overturned, no US state has passed laws specifically shielding abortion-related health data from law enforcement or private firms. Now, New York lawmakers are pushing to fill that gap with stricter privacy rules. Senate Bill 9269, known as the New York Health Information Privacy Act, was first introduced in 2023 by Senator Liz Krueger. The latest version, amended in early 2025, narrows its focus to health data collected while individuals are physically in New York. It also exempts public agencies and data already covered by existing state or federal laws.
Recent incidents have highlighted the risks of unchecked data sharing. In 2024, Near Intelligence allegedly sold location data from Planned Parenthood visits to an anti-abortion ad campaign. A year later, Texas police tracked a woman crossing state lines for an abortion using license plate records. These cases have fuelled concerns about privacy violations in states where abortion is now banned.
The bill has drawn both strong support and opposition. The New York Civil Liberties Union backs the measure, stressing the need to safeguard those seeking abortion or gender-affirming care. Meanwhile, the Business Council of New York State warns of higher operational costs for companies. Assembly sponsor Linda Rosenthal remains optimistic, citing productive talks with Governor Kathy Hochul's office.
Thirteen states have banned abortion since Roe fell, and most have also restricted health care for transgender youth. Advocates argue the bill would help shield New Yorkers—and those travelling to the state—from similar privacy threats. If passed, the law would set clear limits on how health data is handled in New York. Companies violating the rules could face penalties of up to $15,000 per offence. The outcome depends on further negotiations, but supporters believe the measure will strengthen protections in a rapidly changing legal landscape.
