United States · compare states
Massachusetts and New York: health record laws compared
Massachusetts and New York, side by side on the seven questions, with the laws read October 3, 2026. They give different answers on health information exchange, right to sue and breach notice, and the same answer on everything else we could compare. We can't compare health data outside HIPAA (not checked in Massachusetts) and AI in care (not checked in Massachusetts).
The seven questions, side by side
"Differs" marks a question where the answers are not the same; "same" marks one where they are. "Can't compare" means at least one answer was not checked; a not-checked answer is not a no. Where a question has a map, the small square shows the color each column has on it. Each citation opens that state's page, with the law quoted, dated and linked. There is no total and no rank: the questions are on different scales, and some have no best answer.
| Question | Massachusetts | New York |
|---|---|---|
| Health data outside HIPAADo apps and wearables need your OK before sharing health data?can't compare | Can't compare: not checked MA page | No law foundWe searched the official code and found none.How we searched |
| Getting a copyDo you get a copy faster or free in some cases?same | Free copy in some casesIn one way: a free copy in at least one case.Mass. Gen. Laws c.111, s.70; Mass. Gen. Laws c.112, s.12CC | Free copy in some casesIn one way: a free copy in at least one case.N.Y. Public Health Law 18(2)(e), as amended by L.2017, ch.322; N.Y. Public Health Law 18(2)(d), as amended by L.2024, ch.347 |
| Health information exchangeCan you say no to sharing through a health information exchange (a network that passes records between doctors)?differs | Opt-outOpt-out. Your records go through the exchange unless you say no, and there is a published way to say no.Mass. Gen. Laws c.118I, s.11; 101 CMR 20.07(3) | Opt-inOpt-in. Your records go through the exchange only after you agree.10 NYCRR 300.5(a) |
| Are some sensitive records, like mental health or HIV, given extra rules? These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available. | ||
| Reproductive health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Another law is signed and takes effect July 1, 2027.Mass. Gen. Laws c.12C, s.12(b), as amended by Acts 2025 c.16, s.3; Acts 2025 c.16, s.12 (inserting Mass. Gen. Laws c.111, s.70I) | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.N.Y. CPLR 3119(g), as amended by L.2025, ch.694 |
| Mental health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Mass. Gen. Laws c.123, s.36 | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.N.Y. Mental Hygiene Law 33.13(e) |
| HIV recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Mass. Gen. Laws c.111, s.70F | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.N.Y. Public Health Law 2782(1) |
| Genetic recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Mass. Gen. Laws c.111, s.70G | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.N.Y. Civil Rights Law 79-l(3)(a), as added by L.1996, ch.497 |
| Right to sueCan you sue if your records are misused?differs | Yes, in generalYes. You can sue over unlawful collection, use or sharing of medical records or health data in general.Mass. Gen. Laws c.111, s.70E; Mass. Gen. Laws c.111, s.70E(b) | Narrow case onlyOnly in a narrow case, such as a data breach or one kind of record. The laws below say which.PHL 2801-d(1); PHL 2803-c(3)(f) |
| Breach noticeMust you be told if health data leaks in a breach?differs | NeitherNo. The breach notice law covers neither medical nor health insurance information.Mass. Gen. Laws c.93H, s.1; Mass. Gen. Laws c.93H, s.3(b) | Medical and insurance dataYes. The breach notice law covers both medical information and health insurance information.N.Y. General Business Law 899-aa(1)(b)(i)(6)-(7), added by L.2024, ch.613, as amended by A.920 (2025) |
| AI in careAre there rules for AI used in your care?can't compare | Can't compare: not checked MA page | No law foundWe searched the official code and found none.How we searched |
Not legal advice. This records what each law said on the date we read it. Laws and court orders change. State laws add to the federal floor. The United States score in the world index rates only federal law and national systems, so these state profiles do not change it.
Compare other states
All 50 states and Washington, DC, question by question
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research tool, not legal advice. Text CC BY 4.0.