Businesses must protect sensitive-service medical records from unauthorized access
Businesses handling medical records about gender affirming care, abortion services, or contraception must restrict access, separate the records, and limit certain out-of-state handling.
1
What it does
Businesses that store medical information about gender affirming care, abortion services, or contraception must limit who can access it, separate it from other records, and restrict certain out-of-state access or handling.
Argument forPatients receiving gender affirming care, abortion-related services, or contraception may gain more privacy because businesses must limit access and separate those records.
Argument againstBusinesses may face added work to restrict access, block some out-of-state handling, and separate these records, which could make authorized care coordination harder.
More detail
Businesses that store or maintain sensitive-service medical information must set up and use privacy safeguards. This covers businesses storing or maintaining medical information about gender affirming care, abortion and related services, or contraception for health care organizations, pharmaceutical companies, contractors, or employers. It does not apply to a contractor, health care service plan, or health care provider as defined in the cited law. Fees charged to comply must follow federal rules cited in the law. The text sets July 1, 2024, as the deadline to develop and enable the safeguards.
2
Where do you stand?
Choose your position
3
Tell your reps
Take a position to see your representatives and ways to contact them.
4
More on this bill
Where it stands
Introduced
Passed Assembly
Passed Senate
To Governor
Became Law
Looking ahead
No hearings or votes scheduled.
History
2026
Sep 27Chaptered by Secretary of State - Chapter 607, Statutes of 2026.Latest