US-CONGRESS BILLS-119s3097rs: Health Information Privacy Reform Act
The Health Information Privacy Reform Act (S.3097) introduces new federal requirements for handling health information, expanding beyond HIPAA to cover non-covered entities and imposing stricter consent, data minimization, and consumer rights obligations.
Aforeworn detected this change in the US State Data-Privacy Laws space on August 6, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants that collect, use, or share health-related information. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Not specified in the excerpt; check the bill text for the effective date.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
New federal health data privacy rules: requires express consent for processing health data, restricts data sharing, mandates data minimization, and grants consumers rights to access, correct, and delete their health information.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants that collect, use, or share health-related information.
What you must do
Review current data practices for health-related data, update privacy policies and consent mechanisms, implement data minimization and consumer rights procedures, and prepare for compliance by the effective date (to be determined).
Deadline
Not specified in the excerpt; check the bill text for the effective date.
Source: https://www.govinfo.gov/app/details/BILLS-119s3097rs
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- FTC Ditches ‘Disparate Impact’
- California’s Delete Act Reaches Enforcement Stage as Data Brokers Begin Processing Requests - lawcommentary.com
- New Jersey Enacts Ban on Surveillance Pricing - Inside Privacy
- SB 690 amendment narrows CIPA exposure | United States | Global law firm - Norton Rose Fulbright
- Illinois Governor Signs Age-Appropriate Design Code into Law - EPIC – Electronic Privacy Information Center