Bill expands health privacy rules to data brokers and tech companies.

What it does

The bill applies health privacy rules to companies outside hospitals. These companies collect health data, such as data brokers and tech platforms. Companies must get written permission before selling or sharing health information. People gain the right to see, delete, and move their health data. Companies must follow security rules and tell people if data gets breached.

Who it affects

People gain new rights to control health data held by companies. Data brokers and tech platforms must follow new rules about selling information. The bill allows exceptions for research, public health, and fraud prevention.

One thing to notice

The bill defines health information broadly to include location data. Maps and fitness trackers may fall under the new rules.

From the analysis of the bill text, linked under Primary records below.

Where it stands

1 cosponsor: 1 Democrats.

• Nov 4, 2025 — Introduced · Congress.gov: “Introduced in Senate”
• Nov 4, 2025 — Referred to Senate Committee on Health, Education, Labor, and Pensions · Congress.gov: “Read twice and referred to the Committee on Health, Education, Labor, and Pensions”
• Jul 30, 2026 — Reported out of committee · Congress.gov: “Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature…”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

7 groups reported lobbying about this bill. They filed 10 reports from Dec 2025 to Jun 2026.

Those reports show $660,000 in lobbying spending. Each report lists about 1 bills. So that money was not all for this bill.

More groups named this bill than 86% of bills with any report.

Bill Cassidy, who sponsored the bill, received $1,403,254 from PACs for the 2026 election.

• Healthcare Leadership Council — $200,000 in 1 report
• The Sequoia Project — $120,000 in 2 reports
• Alliance for Health Information Operations and Standards — $100,000 in 2 reports
• Leidos Holdings, Inc. — $80,000 in 2 reports
• Mro Corp. — $60,000 in 1 report

Lobbying is legal. These reports show who lobbied about this bill, not what changed.

Words to know

• data brokers — Companies that collect and sell information about people.
• health information — Data about a person's health, medical care, or health services.
• written permission — A signed agreement allowing a company to use or share data.
• security rules — Requirements to protect data from theft or loss.
• lobbying — Trying to influence lawmakers about a bill. Companies and groups pay people to do this.
• PACs — Groups that collect money and give it to candidates for office.