BRANCHLAB RESEARCH

Privacy Updates for Marketing Activation

A living view of the legislation, enforcement, and case law reshaping privacy for healthcare commercialization.

U.S. healthcare privacy law is increasingly fractured and defined at the state level. This resource brings together the legislation, enforcement actions, and case law reshaping the collection, disclosure, sharing, and commercial use of health data through state-by-state summaries, downloadable legal briefings, and ongoing analysis.

U.S. healthcare privacy law is increasingly fractured and defined at the state level. This resource brings together the legislation, enforcement actions, and case law reshaping the collection, disclosure, sharing, and commercial use of health data through state-by-state summaries, downloadable legal briefings, and ongoing analysis.

LATEST REGULATORY REVIEW

State-by-State Privacy Outlook

Select a state to explore current legislation, enforcement actions, case law, and downloadable informational briefs.

Select a state from the index below to explore current legislation, enforcement actions, case law, and downloadable legal analysis.

8 briefs live3 coming soon50 states tracked
8 briefs live3 coming soon50 states tracked
Brief availableComing soonIn progress
Brief availableComing soonIn progress

Interested in a specific state or additional updates?

Privacy Updates for Marketing Activation is provided for informational purposes only and does not constitute legal advice. Organizations should consult their own counsel regarding the application of privacy laws and regulations to their specific activities.

name:Alabama

abbr:AL

status:In progress

law:

featured:false

pov:

name:Alaska

abbr:AK

status:In progress

law:

featured:false

pov:

name:Arizona

abbr:AZ

status:In progress

law:

featured:false

pov:

name:Arkansas

abbr:AR

status:Coming soon

law:

featured:false

pov:

name:California

abbr:CA

status:Brief available

law:Privacy Law and Healthcare Commercialization in California

featured:false

pov:California combines broad privacy protections with the country’s most active state enforcement environment. Health-related inferences, identifiable medical information, website tracking, and location-based advertising all face heightened scrutiny.

name:Colorado

abbr:CO

status:In progress

law:

featured:false

pov:

name:Connecticut

abbr:CT

status:Brief available

law:Privacy Law and Healthcare Commercialization in Connecticut

featured:false

pov:Connecticut has become highly influential in state privacy enforcement. Its expanded law reaches sensitive health data broadly, while strict consent, geofencing, and enforcement rules create clear boundaries for healthcare advertisers and data businesses.

name:Delaware

abbr:DE

status:In progress

law:

featured:false

pov:

name:Florida

abbr:FL

status:Coming soon

law:

featured:false

pov:

name:Georgia

abbr:GA

status:In progress

law:

featured:false

pov:

name:Hawaii

abbr:HI

status:In progress

law:

featured:false

pov:

name:Idaho

abbr:ID

status:In progress

law:

featured:false

pov:

name:Illinois

abbr:IL

status:Brief available

law:Privacy Law and Healthcare Commercialization in Illinois

featured:false

pov:Illinois has no comprehensive privacy law, but it has one of the country’s most active privacy courtrooms. Tracking pixels, biometric data, and genetic information have become major sources of litigation and class-action exposure.

name:Indiana

abbr:IN

status:In progress

law:

featured:false

pov:

name:Iowa

abbr:IA

status:In progress

law:

featured:false

pov:

name:Kansas

abbr:KS

status:In progress

law:

featured:false

pov:

name:Kentucky

abbr:KY

status:In progress

law:

featured:false

pov:

name:Louisiana

abbr:LA

status:In progress

law:

featured:false

pov:

name:Maine

abbr:ME

status:In progress

law:

featured:false

pov:

name:Maryland

abbr:MD

status:Brief available

law:Privacy Law and Healthcare Commercialization in Maryland

featured:false

pov:Maryland now has one of the country’s strictest privacy regimes. Its law prohibits the sale of sensitive data without a consent workaround, making data architecture and rigorous de-identification especially important for healthcare advertising.

name:Massachusetts

abbr:MA

status:In progress

law:

featured:false

pov:

name:Michigan

abbr:MI

status:In progress

law:

featured:false

pov:

name:Minnesota

abbr:MN

status:In progress

law:

featured:false

pov:

name:Mississippi

abbr:MS

status:In progress

law:

featured:false

pov:

name:Missouri

abbr:MO

status:In progress

law:

featured:false

pov:

name:Montana

abbr:MT

status:In progress

law:

featured:false

pov:

name:Nebraska

abbr:NE

status:In progress

law:

featured:false

pov:

name:Nevada

abbr:NV

status:Coming soon

law:

featured:false

pov:

name:New Hampshire

abbr:NH

status:In progress

law:

featured:false

pov:

name:New Jersey

abbr:NJ

status:Brief available

law:Privacy Law and Healthcare Commercialization in New Jersey

featured:false

pov:New Jersey has sharply raised the stakes for sensitive-data transactions. Its new law prohibits the sale of identifiable health, biometric, and precise-location data while expanding oversight of the businesses that collect and broker personal information.

name:New Mexico

abbr:NM

status:In progress

law:

featured:false

pov:

name:New York

abbr:NY

status:Brief available

law:Privacy Law and Healthcare Commercialization in New York

featured:false

pov:New York’s healthcare privacy landscape is developing without a single comprehensive privacy law. Online tracking is the immediate enforcement and litigation risk, while proposed health-data legislation could create stricter rules for health-based advertising.

name:North Carolina

abbr:NC

status:In progress

law:

featured:false

pov:

name:North Dakota

abbr:ND

status:In progress

law:

featured:false

pov:

name:Ohio

abbr:OH

status:In progress

law:

featured:false

pov:

name:Oklahoma

abbr:OK

status:In progress

law:

featured:false

pov:

name:Oregon

abbr:OR

status:In progress

law:

featured:false

pov:

name:Pennsylvania

abbr:PA

status:In progress

law:

featured:false

pov:

name:Rhode Island

abbr:RI

status:In progress

law:

featured:false

pov:

name:South Carolina

abbr:SC

status:In progress

law:

featured:false

pov:

name:South Dakota

abbr:SD

status:In progress

law:

featured:false

pov:

name:Tennessee

abbr:TN

status:In progress

law:

featured:false

pov:

name:Texas

abbr:TX

status:Brief available

law:Privacy Law and Healthcare Commercialization in Texas

featured:false

pov:Texas regulates healthcare privacy through several overlapping laws rather than one health-specific statute. Sensitive data, data brokerage, protected health information, and privacy claims can bring the same advertising workflow under different requirements.

name:Utah

abbr:UT

status:In progress

law:

featured:false

pov:

name:Vermont

abbr:VT

status:In progress

law:

featured:false

pov:

name:Virginia

abbr:VA

status:In progress

law:

featured:false

pov:

name:Washington

abbr:WA

status:Brief available

law:Privacy Law and Healthcare Commercialization in Washington

featured:false

pov:Washington is becoming a test case for healthcare privacy. Its health-specific law reaches well beyond traditional HIPAA settings, while emerging litigation is beginning to define the risk for advertisers, platforms, and healthcare organizations.

name:West Virginia

abbr:WV

status:In progress

law:

featured:false

pov:

name:Wisconsin

abbr:WI

status:In progress

law:

featured:false

pov:

name:Wyoming

abbr:WY

status:In progress

law:

featured:false

pov:

RESEARCH LIBRARY

State Report Index

Browse all 50 state privacy outlooks, track research status, and access available informational briefings.

STATE

STATUS

NEXT STEP

California

Brief available

Connecticut

Brief available

Illinois

Brief available

Maryland

Brief available

New Jersey

Brief available

New York

Brief available

Texas

Brief available

Washington

Brief available

Interested in a specific state? Let us know.

Privacy Updates for Marketing Activation is provided for informational purposes only and does not constitute legal advice. Organizations should consult their own counsel regarding the application of privacy laws and regulations to their specific activities.

RESEARCH METHODOLOGY

How the BranchLab privacy team maintains this intelligence

01

Ongoing evaluation

BranchLab regularly monitors state legislation, enforcement activity, rulemaking, case law, and other legal developments that may affect healthcare privacy and commercialization. 

02

Healthcare-specific

Each brief summarizes selected privacy regulations and related developments, with a focus on potential implications for healthcare commercialization.

03

Living research

State outlooks and downloadable informational briefings are reviewed and updated as material developments emerge, creating living, open-source intelligence.

Bring a BranchLab expert in for an exclusive research briefing

Every organization faces different commercial, operational, and compliance questions. BranchLab can help your team understand the trends and market implications related to state healthcare privacy developments.