GoodRx and Criteo settle data breach class action for $32 million
A court approved a revised settlement of $32 million between GoodRx and Criteo to end a class‑action lawsuit over a data breach.
1 source · trade press
Health privacy beyond HIPAA
Health data rules outside HIPAA: state medical privacy laws such as California’s CMIA, Washington’s My Health My Data Act, the FTC Health Breach Notification Rule and 42 CFR Part 2.
4 stories
California extends CMIA protections to health care chatbots and adds AI guardrails
AB 1979, signed into law on 29 October 2026, expands the Confidentiality of Medical Information Act to cover consumer‑facing chatbots and restricts AI use in clinical decision‑making.
1 source · trade press
- AI governanceHealth privacyUse of Artificial Intelligence by Healthcare Providers Notification ActHighRule change
Rhode Island requires providers to notify patients of AI-drafted notes
Effective 16 June 2026, Rhode Island requires providers to tell patients when AI drafts visit notes and to verify the AI‑generated record for accuracy.
1 source · trade press ONC approves 2026 svap standards for health IT
On 30 June 2026 the Office of the National Coordinator announced approval of new 2026 SVAP standards for health IT systems.
1 source · official