NY A02613

Establishes patient rights to request restrictions on disclosures of their health information through health information networks, electronic health record systems, and health care providers

Defines "sensitive information" to include reproductive health services, gender-affirming care, STI/HIV diagnosis and treatment, mental health services, and substance use treatment records

Requires health information networks and electronic health record systems to develop capacity to block disclosure of sensitive information and allow patients to disable access by out-of-state entities

Mandates 30-day advance notice to patients before complying with civil, criminal, or regulatory inquiries for sensitive health information, unless a court orders otherwise

Requires the Department of Health to establish implementing regulations within 180 days, including lists of codes constituting sensitive information and exceptions for payment processing, public health reporting, and quality compliance