Beyond HIPAA, states have introduced new health data privacy statutes. This episode explores Washington’s My Health My Data Act (MHMD), Nevada’s Consumer Health Data Privacy Act, and Illinois’ Genetic Information Privacy Act (GIPA). We’ll review how these laws define consumer health data, impose consent requirements, and establish rights for deletion and access.
We’ll also discuss enforcement patterns, including class actions under GIPA, and how these statutes expand privacy obligations beyond traditional healthcare providers. Exam questions may require distinguishing between HIPAA-covered entities and businesses subject to these new state health data rules. Produced by BareMetalCyber.com