“Privacy Protection Act” Enacted

BACK TO INSIGHTS     Articles

5/1/2026

The “Privacy Protection Act” was signed into law on March 25, 2026. The Act prohibits government entities and health care facilities from requesting or collecting information relating to a person’s immigration status, citizenship status, place of birth, Social Security number, or individual taxpayer identification number, except when necessary to assess eligibility for, or to provide or administer, a public service, benefit, program, or professional qualification or license, or as otherwise required by State or federal law. Any such information collected for that limited purpose is treated as confidential, is not available under the Open Public Records Act, and may only be disclosed as required by law, pursuant to a valid judicial order or judicial warrant, or with the knowing written consent of the individual. The health care facility provisions of the Act take effect on April 1, 2027.

For more information, contact:
John D. Fanburg, Chair | 973.403.3107 | jfanburg@bracheichler.com
Edward Hilzenrath, HLU Editor | 973.403.3114 | ehilzenrath@bracheichler.com
Erika R. Marshall | 973.364.5236 | emarshall@bracheichler.com

*This is intended to provide general information, not legal advice. Please contact the authors if you need specific advice.

Related Practices:   Healthcare Law

Related Industry:   Healthcare