In the midst of the COVID-19 pandemic, one could imagine the surprise among many, learning that HIPAA (Health Insurance Portability and Accountability Act), doesn’t give broad protection for all health-related data. This acknowledgment spurred conversations among lawmakers, leading to some states passing statutes designed to protect consumer health data. Nevada has recently joined other states, including Washington and Connecticut, in taking steps towards this initiative.
An increasingly top-of-mind issue since the 2022 overturning of Roe v. Wade, data protection related to reproductive health services has driven these discussions. The aim is to safeguard consumers, ensuring their sensitive health data is not mishandled or misused. According to JD Supra, Nevada has moved a significant step closer to addressing these rising concerns by passing SB 370.
Scheduled to become effective on the 31st of March, 2024, the legislation sets up enforceable regulations concerning the use, collection, and disclosure of certain consumer information. Specifically, it addresses instances where the de-identified information is sold or otherwise disclosed. Given that Nevada is home to countless corporations with access to such information, this provision is seen as a key measure for maintaining privacy efforts in the healthcare industry.
Aligning with Washington and Connecticut in their pursuit of fortifying consumer health data protection, Nevada is part of a growing wave of states championing for policy transitions to safeguard sensitive health data. This trajectory suggests that more states could be following suit. Legal professionals, especially those in health sectors, corporations, and law firms, should closely monitor these evolving statutes to ensure necessary compliance and to stay ahead of regulatory changes.
As the American healthcare landscape grapples with the fine line between utilizing data for optimum service delivery and upholding patient privacy, laws like SB 370 represent necessary steps in bridging this gap. Armed with such regulatory measures, states can better manage the friction between data commodification and the fundamental right to privacy while paving the way for a respectful, secure future in health data utility.