S. 3097, the Health Information Privacy Reform Act, advanced out of committee on July 30, 2026.
S. 3097 — Health Information Privacy Reform Act
What it does
This bill extends HIPAA-like privacy protections to health information held by companies outside the traditional healthcare system—data brokers, tech platforms, and other entities that collect or process health data without being covered entities. It requires these regulated entities to obtain written consent before selling or sharing health information, give individuals rights to access, delete, and port their data, and comply with security and breach notification standards. It also tightens rules on de-identification and clarifies how the 'minimum necessary' standard applies to AI/machine learning training.
Quorum's transparency scan gave Health Information Privacy Reform Act a moderate transparency flag.
What happens next
S. 3097 advanced out of committee. Next stop: a floor vote.
Who is behind it
Filed by Bill Cassidy. Cosponsored by Maggie Hassan.