Health record rights in Wyoming: what state law adds
In Wyoming, as of October 3, 2026, your OK is needed before at least some businesses outside HIPAA share your health data; copy rights go no further than HIPAA; you can opt out of the health information exchange; reproductive health, mental health, HIV and genetic records each have a specific confidentiality rule; you can sue only in a narrow case; breach notices must cover medical and health insurance information; and we found no law on AI in care. Each answer below quotes, dates and links the law. There is no state total and no state rank.
Laws read · page updated
Not legal advice. This records what the law said on the date we read it. Laws and court orders change. Read the law itself, or ask a lawyer, before you rely on it. State laws add to the federal floor. The national score rates federal law and national infrastructure and does not change with these state profiles.
Can you sue if your records are misused?Only in a narrow case, such as a data breach or one kind of record. The laws below say which. Same answer in 31 of the 50 states, counting this one.
Federal law, mainly HIPAA, applies in every state; our US page explains it in plain English. Each answer below says what this state adds on top, with the law's name, citation, effective date, the words that matter and a link to the official page.
Do apps and wearables need your OK before sharing health data?
Federal floor: HIPAA does not cover most apps, wearables, websites or data brokers.
Yes, at least for some businesses. A law in force requires your OK before they use or share your health data (opt-in).
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
No comprehensive or consumer health data law found in the 2026 code. Level rests on the genetic data law, which requires express consent from direct to consumer genetic testing companies, one class of non-HIPAA holder.
"Level" is the step on our rulebook's scale for this question. 0 means nothing beyond HIPAA. Higher means the law gives you more here.
Genetic Data Privacy; direct to consumer genetic testing company consent. W.S. 35-32-102(c)(ii)(B)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
Separate express consent for transferring or disclosing the consumer's genetic data to any person other than the company's vendors and service providers, or for using genetic data beyond the primary purpose of the genetic testing product or service and inherent contextual uses;
Who it binds, in our words: "Direct to consumer genetic testing company" or "company" means any person that offers consumer genetic testing products or services directly to consumers or who collects, uses or analyzes genetic data provided by a consumer (W.S. 35-32-101(a)(x)); the chapter does not apply to HIPAA protected health information (W.S. 35-32-105(b)).
Genetic testing; informed consent to obtain, retain or disclose. W.S. 35-32-102(a)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
no person conducting genetic testing shall do any of the following without the informed consent of the individual or the individual's authorized representative:
Who it binds, in our words: Any person conducting genetic testing; exceptions in W.S. 35-32-102(b).
Second check by a separate agent: confirmed.
Do you get a copy faster or free in some cases?
Federal floor: HIPAA gives the provider 30 days, plus one 30-day extension, and allows a cost-based fee. We also count the federal information blocking rule (45 CFR Part 171).
No. A law is in force, but it adds nothing to HIPAA's terms.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Hospital records act repealed 2019; no statute found. A Board of Medicine rule (Ch. 3 s. 4) may bar denying copies for inability to pay. Its official text could not be opened on rules.wyo.gov, so the cell stays unscored.
Deadline in the law: 30 days (not shorter than HIPAA's 30).
Fee rule: Physician may charge actual costs of copies, clerical time and physician review time; copy may not be denied for inability to pay (Board of Medicine Ch. 3 s. 4(e)).
Goes beyond the federal floor: no.
Repeal of the hospital records and information act. 2019 Wyo. Sess. Laws ch. 78 (SF0096, Enrolled Act 53), section 3
Repealed or replaced · effective · read October 3, 2026 · source(wyoleg.gov)
W.S. 35-2-605 through 35-2-617 are repealed.
Who it binds, in our words: Former hospital records access rules, W.S. 35-2-605 to 35-2-617.
Wyo. Admin. Rules, Board of Medicine Ch. 3 s. 4 (052.0001.3)
In force · effective · read October 3, 2026 · source(rules.wyo.gov)
Physicians shall comply with the patient's written request within a reasonable period or no more than thirty days, whichever is shorter.
Second check by a separate agent: disputed, then settled by the authors on October 3, 2026.
Can you say no to sharing through a health information exchange (a network that passes records between doctors)?
Federal floor: HIPAA lets providers share records for treatment without asking you.
Opt-out. Your records go through the exchange unless you say no, and there is a published way to say no.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
The WDH rule, Ch. 1 s. 6(b) (048.0074.1), sets opt-out. The WYFI opt-out page, https://health.wyo.gov/healthcarefin/wyoming_frontier_information_wyfi/opt-out-opt-in/, is the published opt-out form.
Set by a regulation.
Designated exchange: Wyoming Frontier Information (WYFI), administered by the Wyoming Department of Health under W.S. 9-2-131.
Wyoming health information exchange. W.S. 9-2-131(a)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
The department of health is authorized to administer and maintain the exchange to facilitate the secure and voluntary sharing of electronic health information between health care providers for the benefit of Wyoming residents.
Who it binds, in our words: The statewide health information exchange administered by the department of health.
Wyo. Admin. Rules, Dept. of Health, WYFI Program Ch. 1 s. 6(b) (048.0074.1)
In force · effective · read October 3, 2026 · source(rules.wyo.gov)
Participants and authorized users that elect to participate in the Health Information Exchange shall notify their patients in writing and provide the opportunity for patients to opt-out of their data being used or exchanged with the Health Information Exchange.
Second check by a separate agent: disputed, then settled by the authors on October 3, 2026.
Are some sensitive records, like mental health or HIV, given extra rules?
These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available.
Reproductive health records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Renumbered from 35-6-108 by 2023 ch. 184 (HB0152), which became law March 17, 2023. Limits release of report forms to the attorney general, a district attorney or the board of medicine.
Compilations of abortions; matter of record; exception. W.S. 35-6-132(b)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
131 shall be maintained in strict confidence by the state office of vital records services, shall not be a public record and shall not be made available except to the attorney general or a district attorney with appropriate jurisdiction pursuant to a criminal investigation
Who it binds, in our words: Abortion reporting forms held by the state office of vital records services.
Second check by a separate agent: confirmed.
Mental health records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Subsection (b) allows disclosure with prior written consent. W.S. 25-10-122 also makes involuntary hospitalization records confidential; its effective date was not confirmed, so it is not listed.
In force · effective · read October 3, 2026 · source(wyoleg.gov)
Client registration records and treatment records relating to persons receiving mental health or substance abuse treatment at a treatment facility under contract with the department shall remain confidential
Who it binds, in our words: Treatment facilities under contract with the department of health.
Second check by a separate agent: confirmed.
HIV records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Rule covers sexually transmitted diseases, which by statute include AIDS. Effective dates are null: the official code PDF has no history note and no amending act was found.
Report required; notification; confidentiality of information. W.S. 35-4-132(d)
In force · current version date not confirmed · read October 3, 2026 · source(wyoleg.gov)
Information and records relating to a known or suspected case of sexually transmitted disease which has been reported, acquired and maintained under W.S. 35-4-130 through 35-4-134 are confidential
Who it binds, in our words: Reported sexually transmitted disease information and records.
List of reportable sexually transmitted diseases. W.S. 35-4-130(b)
In force · current version date not confirmed · read October 3, 2026 · source(wyoleg.gov)
The department of health shall by rule and regulation develop a list of reportable sexually transmitted diseases including all venereal diseases and acquired immune deficiency syndrome.
Who it binds, in our words: Department of health reportable disease list.
Second check by a separate agent: disputed, then settled by the authors on October 3, 2026.
Genetic records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Informed consent is required to obtain, test, retain or disclose genetic data. Amended by 2022 HB0086, effective July 1, 2022.
In force · effective · read October 3, 2026 · source(wyoleg.gov)
no person conducting genetic testing shall do any of the following without the informed consent of the individual or the individual's authorized representative:
Who it binds, in our words: Any person conducting genetic testing; HIPAA protected health information excluded by W.S. 35-32-105(b).
Second check by a separate agent: confirmed.
Can you sue if your records are misused?
Only in a narrow case, such as a data breach or one kind of record. The laws below say which.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
A person may sue only under the genetic data law, one narrow category. The breach notice law is enforced by the attorney general. No general medical records law with a private right was found.
Damages a court may award: None fixed. Damages, injunction, and costs and reasonable attorney fees to a prevailing party, after a 60-day written notice and cure period (W.S. 35-32-104(b)).
Genetic data privacy; criminal penalty; private right of action. W.S. 35-32-104(b)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
An individual whose rights have been violated under the provisions of this chapter may bring a civil action to enjoin or restrain any violation of this chapter and may in the same action seek damages from the person violating this chapter.
Who it binds, in our words: Violations of the genetic data privacy chapter, W.S. 35-32-101 to 35-32-105.
Computer security breach; attorney general enforcement. W.S. 40-12-502(f)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
The attorney general may bring an action in law or equity to address any violation of this section and for other relief that may be appropriate to ensure proper compliance with this section, to recover damages, or both.
Who it binds, in our words: Breach notice duties under W.S. 40-12-502.
Second check by a separate agent: confirmed.
Must you be told if health data leaks in a breach?
Yes. The breach notice law covers both medical information and health insurance information.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Both elements were added by 2015 SF0036 (Enrolled Act 20), effective July 1, 2015. No attorney general or regulator notice is required by the statute.
Deadline to tell people: most expedient time possible and without unreasonable delay.
No duty found to tell the attorney general or a regulator.
A business that follows HIPAA's breach rules is treated as following this law.
Definitions; personal identifying information. W.S. 40-12-501(a)(vii)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
"Personal identifying information" means the first name or first initial and last name of a person in combination with one (1) or more of the data elements specified in W.S. 6-3-901(b)(iii) through (xiv), when the data elements are not redacted.
Who it binds, in our words: Individuals and commercial entities that conduct business in Wyoming and own or license computerized data with personal identifying information of a Wyoming resident (W.S. 40-12-502(a)).
Personal identifying information; medical information. W.S. 6-3-901(b)(xi)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
Medical information, meaning a person’s medical history, mental or physical condition, or medical treatment or diagnosis by a health care professional;
Who it binds, in our words: Data element incorporated into the breach law by W.S. 40-12-501(a)(vii).
Personal identifying information; health insurance information. W.S. 6-3-901(b)(xii)
In force · effective · read October 3, 2026 · source(wyoleg.gov)
Health insurance information, meaning a person’s health insurance policy number or subscriber identification number, any unique identifier used by a health insurer to identify the person or information related to a person’s application and claims history;
Who it binds, in our words: Data element incorporated into the breach law by W.S. 40-12-501(a)(vii).
In force · effective · read October 3, 2026 · source(wyoleg.gov)
A covered entity or business associate that is subject to and complies with the Health Insurance Portability and Accountability Act, and the regulations promulgated under that act, 45 C.F.R. Parts 160 and 164, is deemed to be in compliance with this section
Who it binds, in our words: HIPAA covered entities and business associates.
In force · effective · read October 3, 2026 · source(wyoleg.gov)
Notice shall be made in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement
Who it binds, in our words: Notice to affected Wyoming residents.
Second check by a separate agent: confirmed.
Are there rules for AI used in your care?
The three rules we look for: you must be told when AI is used in your care; a licensed clinician decides, not AI alone; you can reach a human, or have a human review the decision. Each counts only if the law names health care or health coverage.
No law found We searched the official code and found none.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Searched current Titles 6, 9, 25, 26, 33, 35 and 40. AI provisions found only in criminal law (Title 6). A 2025 interim proposal on AI in prior authorization was not found enacted.
These public figures describe conditions that can affect whether people are able to use the rights above, such as health insurance and internet at home. They are not scored, not part of any answer, and not a reason for any answer. Each is the latest the source publishes for the state, checked against the publisher (the Census Bureau or the Bureau of Labor Statistics); grouped under the Healthy People 2030 social determinants of health.
Source and period on every row. Figures from DataSpine, each checked against its publisher. Not scored.
Figure
Value
Source and period
People under 65 without health insuranceHealth care access and quality
12.5%
Small Area Health Insurance Estimates, SAHIE 2024 (single-year model estimate)
Households with a computerHealth care access and quality
94.5%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a broadband internet subscriptionHealth care access and quality
88.2%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a smartphone and no other computerHealth care access and quality
8.3%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Median household incomeEconomic stability
$72,495 (2022 dollars)
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Unemployment rateEconomic stability
3.5%
Local Area Unemployment Statistics, December 2025, monthly, seasonally adjusted
Households without a vehicleNeighborhood and built environment
3.8%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
People who speak a language other than English at homeSocial and community context
6.8%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households of one person aged 65 or overSocial and community context
12.5%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Not shown: the number of people below the poverty line and the number with a bachelor's degree, which are available only as counts, and counts do not compare across states of different size.
Not shown yet, with no checked state figure: Medicare members who also have Medicaid; Medicaid enrollment; primary care supply; social vulnerability, income and jobs; people in nonmetro counties; social vulnerability, housing and transport; social vulnerability, household and minority themes.
Also recorded: a data broker registry
A fact, not part of any answer above. No law found We found no data broker registry law.
Another state
This study covers the 50 states and Washington, DC. It does not cover the US territories (Puerto Rico, Guam, the US Virgin Islands, the Northern Mariana Islands and American Samoa).
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research by AI agents built on Anthropic's Claude, checked by a second agent and ruled by the authors; how we did it. Research tool, not legal advice. Text CC BY 4.0.
