← All Bills

S929

An act to amend the General Business Law — 2025-01-21 · Calendar #101

The New York State Senate passed legislation sponsored by Sen. Krueger to expand health data privacy protections, requiring consumers to opt-in before private companies can sell their personal health information. The bill, S929, passed 49-10 on a roll call vote. Sen. Krueger argued the measure addresses a critical gap in privacy law, noting that the federal HIPAA statute only covers hospitals and doctor's offices, leaving telehealth providers and other private companies free to sell sensitive health data without consumer consent. She cited the example of telehealth erectile dysfunction medication purchases, where companies can sell customer information to third parties for marketing purposes without authorization. The legislation would require affirmative consent before any company using computers could share an individual's health information with other businesses. Ten senators voted against the bill: Borrello, Mattera, Murray, Oberacker, O'Mara, Ortt, Palumbo, Walczyk, Weber, and Weik. The bill takes effect one year after becoming law.
PASSED Ayes: 49 · Nays: 10

Debate Summary

Sen. Krueger argued the bill expands privacy protections for health data by requiring opt-in consent before private companies can sell personal health information. She noted that HIPAA only covers hospital and doctor's office settings, leaving telehealth and other private companies free to sell sensitive health data without consumer knowledge or consent. The bill would require individuals to affirmatively authorize sharing of their health information with third parties.

Recorded Votes

Recorded votes are predominantly dissenting (nay) votes captured from roll call records.

Senator Vote Party
Borrello nay Republican
Mattera nay Republican
Murray nay Republican
O'Mara nay Republican
Oberacker nay Republican
Ortt nay Republican
Palumbo nay Republican
Walczyk nay Republican
Weber nay Republican
Weik nay Republican