NY A01911

Requires employers with 50+ employees and insurers to limit collection of wellness program participants' personal information to what is reasonably necessary to operate the program

Prohibits sharing personal information collected through wellness programs with third parties and mandates deletion or de-identification of data when programs end or employment/coverage terminates

Requires written disclosure to participants detailing all data collected, data sharing practices, and enrollees' rights under federal and state law

Bans retaliation or adverse actions against individuals who decline to participate in wellness programs, including denial of coverage, termination, or premium adjustments

Creates a private right of action for consumers with damages of $750 per incident or actual damages (whichever is greater), plus civil penalties up to $7,500 per intentional violation and $2,500 per unintentional violation