Health Information Privacy Reform Act
The source supplies the latest action, but no lifecycle stage.
Latest action (4 Aug 2026): Placed on Senate Legislative Calendar under General Orders. Calendar No. 538.
What this bill does
S. 3097, the Health Information Privacy Reform Act, would direct the Secretary of Health and Human Services, working with the Federal Trade Commission, to write regulations creating privacy, security, and breach-notification standards for "applicable health information" handled by entities and service providers not already covered by HIPAA. These rules must offer protections at least equivalent to, and harmonized where possible with, existing HIPAA privacy and security protections, and must be issued within 18 months of enactment. The regulations would set permitted and prohibited uses of health data, require written individual authorization before such information can be sold, licensed, transferred, or used for marketing, and bar using consumer "reasonable expectations" exceptions to justify investigating or penalizing people for seeking or providing health care.
The bill primarily affects businesses and service providers that collect or process health-related information outside the traditional HIPAA framework—such as health apps, wellness technologies, and similar data handlers—along with the individuals whose health data they process.
The bill was introduced by Sen. Bill Cassidy in November 2025 and referred to the Senate Health, Education, Labor, and Pensions Committee. In July 2026 the committee ordered it reported favorably with an amendment in the nature of a substitute, which replaced much of the original bill's text (including provisions on record-access fees, substance-use record confidentiality, a National Academies study, and de-identification standards) with revised language; the available text of the substitute is incomplete. The bill next awaits further Senate action.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Timeline
4 Aug 2026
Placed on Senate Legislative Calendar under General Orders. Calendar No. 538.
Common questions
- What does S. 3097 do?
- S. 3097, the Health Information Privacy Reform Act, would direct the Secretary of Health and Human Services, working with the Federal Trade Commission, to write regulations creating privacy, security, and breach-notification standards for "applicable health information" handled by entities and service providers not already covered by HIPAA. These rules must offer protections at least equivalent to, and harmonized where possible with, existing HIPAA privacy and security protections, and must be issued within 18 months of enactment. The regulations would set permitted and prohibited uses of health data, require written individual authorization before such information can be sold, licensed, transferred, or used for marketing, and bar using consumer "reasonable expectations" exceptions to justify investigating or penalizing people for seeking or providing health care. The bill primarily affects businesses and service providers that collect or process health-related information outside the traditional HIPAA framework—such as health apps, wellness technologies, and similar data handlers—along with the individuals whose health data they process. The bill was introduced by Sen. Bill Cassidy in November 2025 and referred to the Senate Health, Education, Labor, and Pensions Committee. In July 2026 the committee ordered it reported favorably with an amendment in the nature of a substitute, which replaced much of the original bill's text (including provisions on record-access fees, substance-use record confidentiality, a National Academies study, and de-identification standards) with revised language; the available text of the substitute is incomplete. The bill next awaits further Senate action.
- Has S. 3097 become law?
- The source does not supply a confirmed lifecycle stage for S. 3097. Check the latest action and official source below.
- Who sponsored S. 3097?
- S. 3097 was sponsored by Sen. Cassidy, Bill [R-LA] (R-LA), with 1 cosponsor.
- What's the latest action on S. 3097?
- Placed on Senate Legislative Calendar under General Orders. Calendar No. 538. (4 Aug 2026).
Related bills in Commerce
Critical Infrastructure Manufacturing Feasibility Act
Cybersecurity for Small Businesses Act of 2026
Small Business Payment for Performance Act of 2026
Combating Foreign Threats to Main Street Act of 2026
More bills from Sen. Cassidy, Bill [R-LA]
Taxpayer Funded Compensation Accountability Act
Domestic Manufacturing Revitalization Act of 2026
Safe and Fair Elections Act of 2026
A bill to amend the Internal Revenue Code of 1986 to eliminate the State opt-in requirement for the qualified elementary and secondary education scholarship credit.
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.