The Health Information Privacy Reform Act (S. 3097) is a proposed law introduced by Senator Bill Cassidy on November 4, 2025, aiming to strengthen the privacy and security of health-related information. The bill directs the Secretary of Health and Human Services, in consultation with the Federal Trade Commission, to establish new regulations that would apply to any entity handling health data, not just traditional healthcare providers. These regulations would set standards for how health information can be used and shared, ensure individuals have rights to access, amend, delete, and transfer their health data, and require entities to notify individuals in case of data breaches. Additionally, the bill seeks to create unified national standards for de-identifying health information to prevent re-identification and applies existing HIPAA preemption rules to ensure consistency across state laws.
Supporters of the Health Information Privacy Reform Act commend its comprehensive approach to modernizing health data privacy. They highlight that the bill extends protections beyond traditional healthcare providers to include technology companies and other entities that handle health-related data, addressing gaps in current laws. The emphasis on individual rights, such as access and control over personal health information, is seen as a significant advancement in empowering consumers. Additionally, the establishment of unified standards for de-identifying data is praised for enhancing privacy and security in the digital age.
Critics of the Health Information Privacy Reform Act express concerns about the potential regulatory burden on businesses, particularly smaller companies and startups that handle health data. They argue that the stringent requirements for data handling, breach notifications, and de-identification processes could be costly and complex to implement. There is also apprehension that the bill's broad scope might stifle innovation in health technology by imposing heavy compliance obligations. Furthermore, some privacy advocates worry that the bill may not go far enough in protecting individuals from data misuse, especially in the context of emerging technologies like artificial intelligence.
The Health Information Privacy Reform Act, sponsored by Bill Cassidy, does not show any direct industry overlaps with the sponsor's top donor industries, which include Health Professionals and Retired individuals. While Cassidy has received a significant amount of funding from Health Professionals, totaling $120 million, this does not directly correlate with the subject matter of health information privacy reform. The absence of PAC contributions further indicates that the funding is primarily from individual donors, which may reduce the perception of conflict. Additionally, the Retired category, contributing $37.5 million, does not relate to health information privacy, further supporting a low risk assessment. Voters should be aware that while large donations from health professionals exist, the lack of direct industry overlap suggests minimal immediate conflicts of interest regarding this specific legislation.
Top industries funding Bill Cassidy, ranked by total contributions.
Source: OpenSecrets.org (Center for Responsive Politics)
