RepublicanBill ยท S. 3097ยท Senate(119-S-3097)

Health Information Privacy Reform Act

Rep. Cassidy
Age: 69 years
Louisiana
Introduced
11/4/2025
Last activity
8/4/2026 โ€” Placed on Senate Legislative Calendar under General Orders. Calendar No. 538.
Sponsored by
Bill Cassidy
Cosponsors
Republican - 0Democrat - 1
Commerce
  1. Introduced
  2. On Calendar

What this bill would do

S. 3097 is known as the Health Information Privacy Reform Act. This bill directs the Secretary of Health and Human Services, along with the Federal Trade Commission, to set new privacy, security, and breach notification standards for health information. It places limits on how regulated entities and service providers can collect, use, retain, and transfer applicable health information. The bill also establishes rules for patient access to electronic health records, including rules around fees and third-party transmission. Additionally, it requires the creation of unified national standards for de-identifying health information and prohibits the re-identification of such data. Finally, the legislation sets specific regulations regarding minimum necessary data standards for artificial intelligence and machine learning models.

Yesยท 3 of 14

  • Does this protect people from being watched or searched?+9

    By introducing comprehensive privacy regulations, data minimization requirements, and re-identification bans, the bill robustly protects personal health information rights.

  • Does this give people more control over their personal data?+8

    The bill significantly strengthens privacy protections by setting unified national de-identification standards, banning re-identification, and limiting data retention.

  • Does this give people more protection from unfair business practices?+7

    The bill establishes strict privacy, security, and breach notification standards for health information outside traditional HIPAA coverage, enhancing consumer data protections.

The opposite

  • Would business owners be better off under this?-2

    Regulated entities and data brokers face stringent compliance obligations, data minimization rules, and civil penalties.