About the Law

Back to Intro

Below is an overview of consumers’ rights under the new law. Learn what you can do if you believe your rights have been violated. If a health provider or plan is found to be in violation of the new law, they may be subject to fines ranging from $100 to $250,000, and one to ten years in prison. For information on how to file a complaint and additional resources, click here.

Use of Health Information

The new privacy law sets limits on how health providers and plans may use individually identifiable health information. Under the new law, health providers and plans may use your individual health information for treatment, payment, or healthcare operations without obtaining your permission. Personal health information may generally not be used for purposes not related to health care. And the release of health information must be limited to the minimum amount necessary for the purpose of the disclosure.

Notice of Rights

You must now be given a notice of your privacy rights when you see your doctor, dentist, pharmacist, or any other healthcare provider. The notice explains how your health information will be used and also tells you about your privacy rights. Providers are required to make a good faith effort to get you to acknowledge that you received the notice or your privacy rights by signing it, but you are not required to sign the notice.