NY S07042

Creates new crime of "unlawful possession of a patient record" under Penal Law § 250.73

Applies when a person obtains or receives a patient record without legal authority and intentionally ignores a written demand from the healthcare provider or patient to return or destroy the record

Defines "patient record" as patient information in written or electronic form as defined in Public Health Law section 18

Exempts HIPAA-covered entities from the definition of "person" under this statute

Classifies the offense as a class A misdemeanor, effective 60 days after becoming law