State Privacy Laws

 

 

Alabama, AL

• Recognizes the psychotherapist-patient privilege
• Does NOT recognize physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• Alabama State Legislature Website

Alaska, AK

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• Alaska State Legislature Website

Arizona, AZ

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Arizona State Legislature Website

Arkansas, AR

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Does not protect records of individual confined to a mental facility, mental health program, or mental health treatment.
• Has legislation requiring notification of security breaches involving personal information.
• Arkansas State Legislature Website

California, CA

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• California State Legislature Website

Colorado, CO

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Colorado State Legislature Website

Connecticut, CT

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintain cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Connecticut State Legislature Website

Delaware, DE

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Delaware State Legislature Website

>Washington, District of Columbia, DC

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• District of Columbia Legislation Website

Florida, FL

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Florida State Legislature Website

Georgia, GA

• Recognizes the psychotherapist-patient privilege
• Does NOT recognize physician-patient privilege
• Maintain cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Georgia State Legislature Website

Hawaii, HI

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Hawaii State Legislature Website

Idaho, ID

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Idaho State Legislature Website

Illinois, IL

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Illinois State Legislature Website

Indiana, IN

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Does NOT protect HIV/AIDS information
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Indiana State Legislature Website

Iowa, IA

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintain cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• Iowa State Legislature Website

Kansas, KS

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Kansas State Legislature Website

Kentucky, KY

• Recognizes the psychotherapist-patient privilege
• Does NOT recognize physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• Kentucky State Legislature Website

Louisiana, LA

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Louisiana State Legislature Website

Maine, ME

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Maine State Legislature Website

Maryland, MD

• Recognizes the psychotherapist-patient privilege
• Does NOT recognize physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Maryland State Legislature Website

Massachusetts, MA

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Does not protect records of individual confined to a mental facility, mental health program, or mental health treatment.
• Has legislation requiring notification of security breaches involving personal information.
• Massachusetts State Legislature Website

Michigan, MI

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Michigan State Legislature Website

Minnesota, MN

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Does not protect records of individual confined to a mental facility, mental health program, or mental health treatment.
• Has legislation requiring notification of security breaches involving personal information.
• Minnesota State Legislature Website

Mississippi, MS

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• Mississippi State Legislature Website

Missouri, MO

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• Missouri State Legislature Website

Montana, MT

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintain cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Montana State Legislature Website

Nebraska, NE

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintain cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Does NOT protect HIV/AIDS information
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Nebraska State Legislature Website

Nevada, NV

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Nevada State Legislature Website

New Hampshire, NH

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• New Hampshire State Legislature Website

New Jersey, NJ

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• New Jersey State Legislature Website

New Mexico, NM

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintain cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• New Mexico State Legislature Website

New York, NY

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Does not protect STD information.  Is the only state where STD information may be disclosed by court order in a criminal or family court proceeding.
• Has legislation requiring notification of security breaches involving personal information.
• New York State Legislature Website

North Carolina, NC

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• North Carolina State Legislature Website

North Dakota, ND

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintain cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• North Dakota State Legislature Website

Ohio, OH

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Ohio State Legislature Website

Oklahoma, OK

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Oklahoma State Legislature Website

Oregon, OR

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Oregon State Legislature Website

Pennsylvania, PA

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Pennsylvania State Legislature Website

Rhode Island, RI

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Rhode Island State Legislature Website

South Carolina, SC

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Does NOT recognize physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• South Carolina State Legislature Website

South Dakota, SD

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• South Dakota State Legislature Website

Tennessee, TN

• Recognizes the psychotherapist-patient privilege
• Does NOT recognize physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available but do not provide a cause of action for violations of provisions
• Does NOT protect HIV/AIDS information
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Tennessee State Legislature Website

Texas, TX

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Texas State Legislature Website

Utah, UT

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintain cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Utah State Legislature Website

Vermont, VT

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Vermont State Legislature Website

Virginia, VA

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• Virginia State Legislature Website

Washington, WA

• Right to privacy is expressly set forth in their Constitution
• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged but does NOT provide cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Washington State Legislature Website

West Virginia

• Recognizes the psychotherapist-patient privilege
• Does NOT recognize physician-patient privilege
• Maintains cancer registries
• Does NOT protect genetic test results
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization.  However, does NOT provide a civil or criminal remedy for the release or public disclosure of mental health information.
• Has NO legislation requiring notification of security breaches involving personal information.
• West Virginia State Legislature Website

Wisconsin, WI

• Recognizes the psychotherapist-patient privilege

Recognizes the physician-patient privilege

• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Holds that HIV/AIDS records are privileged and provides cause of action
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Wisconsin State Legislature Website

Wyoming, WY

• Recognizes the psychotherapist-patient privilege
• Recognizes the physician-patient privilege
• Maintains cancer registries
• Genetic testing statutes are available and provide a cause of action for violations of provisions
• Does NOT protect HIV/AIDS information
• Holds that mental health records of an individual are confidential and may not be disclosed without the patient’s authorization while providing a civil and/or criminal remedy for the release or public disclosure of mental health information.
• Has legislation requiring notification of security breaches involving personal information.
• Wyoming State Legislature Website