On February 13, 2026, a putative class filed a Complaint in the U.S. District Court for the Northern District of Illinois alleging that Tempus AI, Inc. (“Tempus AI”) violated the Illinois Genetic Information Privacy Act (410 ILCS 513/1 et seq., “GIPA”). The plaintiffs claim Tempus AI unlawfully obtained and disclosed genetic information belonging to customers […]
New Jersey Expands HIPAA-Based Exemptions Under Its Comprehensive Privacy Law
On January 20, 2026, the New Jersey Governor signed Assembly Bill A5017 (“Amendment”), amending the New Jersey Data Protection Act (“NJDPA”). The Amendment exempts data that is not protected health information (“non-PHI”) from the NJDPA when it is handled by covered entities or business associates in accordance with the privacy and security requirements of the […]
Closing the Privacy Gap: HIPRA Targets Health Apps and Wearables
Move over HIPAA…the health privacy landscape may be in for a shakeup. On November 4, 2025, Senator Bill Cassidy, M.D. (R-LA) introduced the Health Information Privacy Reform Act (HIPRA), a bill aimed at closing a gap in health data protections. HIPAA has long governed the privacy of traditional medical records held by health care providers […]
Unlocking the MIND Act: The Senate To Take on the Challenge of Neurotechnology
On September 24, 2025, Ranking Member Cantwell (D-Wash.), Leader Schumer (D-NY), and Senator Markey (D-Mass.) announced they will introduce the “Management of Individuals’ Neural Data Act of 2025” (“MIND Act”). If enacted, the MIND Act will direct the Federal Trade Commission (“FTC”) to conduct a comprehensive study and report on the collection, processing, storage, sale, […]
To Delete or Not to Delete: Can 23andMe Really Sell Genetic Data Via Bankruptcy?
On March 23, 2025, 23andMe Holding Co. (“23andMe”) filed for bankruptcy in the Eastern District of Missouri, potentially setting in motion the sale of genetic data collected from more than 15 million people. This has led to news outlets and state Attorneys General encouraging consumers to delete their 23andMe data before it is sold as […]