Follow changes to the index

Since the index was published on October 2, 2026, we have recorded 17 new real cases, no score changes, 19 law updates and 6 changed state answers. The latest change is from October 5, 2026.

Each link below is a feed (Atom). Copy its address into a feed reader app, and each change we publish arrives as a new entry. There is one feed for everything, and one for each country and territory, each state and DC. We do not send email.

Everything: https://healthrecordrights.com/feeds/changes.xml

Changes, newest first

October 5, 2026

Alabama: the answer on health information exchange changed. Was "Not checked." Now "Opt-out."
Connecticut: the answer on health information exchange changed. Was "Not checked." Now "Opt-out."
New Hampshire: the answer on health information exchange changed. Was "Not checked." Now "Repealed."
New Jersey: the answer on health information exchange changed. Was "Not checked." Now "No law found."

October 4, 2026

Alabama: the laws behind mental health records updated. The answer stays "Has a rule." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Massachusetts: the answer on health information exchange changed. Was "Not checked." Now "Opt-out."
Massachusetts: the laws behind HIV records updated. The answer stays "Has a rule." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Massachusetts: the laws behind genetic records updated. The answer stays "Has a rule." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Massachusetts: the laws behind breach notice updated. The answer stays "Neither." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Washington, DC: the laws behind genetic records updated. The answer stays "Has a rule." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Florida: the laws behind reproductive health records updated. The answer stays "Has a rule." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Georgia: the laws behind AI in care updated. The answer stays "1 of 3 rules." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Missouri: the laws behind health information exchange updated. The answer stays "No general choice." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Mississippi: the laws behind getting a copy updated. The answer stays "Neither." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
North Carolina: the laws behind health information exchange updated. The answer stays "Opt-out." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
New York: the laws behind right to sue updated. The answer stays "Narrow case only." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Oklahoma: the laws behind health information exchange updated. The answer stays "Opt-out." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Texas: the laws behind health information exchange updated. The answer stays "No general choice." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Utah: the laws behind health information exchange updated. The answer stays "Opt-out." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Wyoming: the laws behind getting a copy updated. The answer stays "Neither." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Wyoming: the laws behind health information exchange updated. The answer stays "Opt-out." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
New real case in Spain. Spanish regulator fines 23andMe after hacker accessed residents' sensitive health data (source dated July 27, 2026).
New real case in France. Regulator fines private hospital after attacker reached hundreds of thousands of patient records (source dated September 4, 2026).
New real case in the United Kingdom. Scottish health boards recorded over 5,000 patient data breaches in four years (source dated July 12, 2026).
New real case in the United Kingdom. Hospital trust in England confirms thousands of patients' test results stolen in supplier hack (source dated June 8, 2026).
New real case in Ireland. Regulator fines national health service after intruders reached poorly stored paper records (source dated September 7, 2026).
New real case in Italy. Italian regulator fines analytics firm over GP patient records it wrongly called anonymous (source dated October 3, 2026).
New real case in Kenya. Regulator orders hospital to pay woman after issuing her another patient's results (source dated April 18, 2026).
New real case in the Netherlands. Software supplier admits hackers stole patient records from several Dutch care providers (source dated April 20, 2026).
New real case in Serbia. Forum claim says national health insurer database was breached; insurer cannot yet confirm (source dated August 18, 2026).
New real case in Ukraine. Man says health facility withheld some of late mother's records until ombudsman intervened (source dated October 1, 2026).
New real case in the United States. Health records company confirms data of 3.75 million patients stolen in breach (source dated August 19, 2026).
New real case in the United States. Billing software vendor confirms theft of insurance and claims data for 3.8 million people (source dated August 12, 2026).
Delaware: the laws behind getting a copy updated. The answer stays "Faster for some patients." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
Florida: the answer on getting a copy changed. Was "Faster, and free in some cases." Now "Faster for some patients, free in some cases."
Texas: the laws behind getting a copy updated. The answer stays "Faster, and free in some cases." We updated a law behind it (a citation, link, status or date). The state page lists the current laws.
The 50 states and DC added.

October 3, 2026

New real case in the United States. Patient asked for her records in writing in March and got them in October (source dated November 18, 2024).
New real case in the United States. Patient's full records arrived more than two years after her representative first asked (source dated March 6, 2025).
New real case in the United States. Second round of refunds after counseling service shared users' health answers with advertisers (source dated April 2025).
New real case in the United States. Health website shared article titles that could reveal a reader's diagnosis (source dated July 1, 2025).
New real case in the United States. Federal and state regulators sue telehealth company over sharing health details with advertisers (source dated July 29, 2026).
The United States: key laws updated. Added: 21st Century Cures Act information blocking rule (45 CFR Part 171). Taken off the list: California AB 3030.

Countries and territories

The 50 states and DC

What counts as a change

A real case we publish, or take off (its source is more than two years old, or on request).
A change to a country's overall score or to one of its eight scores, out of 100.
A law added to or taken off a country's list of key laws, or a change to its level, year or link.
A change to a state's answer to one of our questions, or to the laws behind an answer.

A change to our explanations alone is not listed. A change to a short answer is. Each entry is dated the day we published it. The record starts on October 2, 2026.

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI · Follow changes

Health Record Rights Index, by SuperTruth. Privacy. This page last changed on October 5, 2026.