New York is stepping up health data privacy. On January 22, 2025, the state legislature passed the New York Health Information Privacy Act (NYHIPA)—setting strict new rules for how companies handle consumer health data.