Privacy Rules Are Tightening, Again. Here’s How Your Healthcare Marketing Can Embrace Compliance to Thrive

As of early 2025, 20 U.S. states have enacted comprehensive data privacy laws , with more expected to follow. Washington state’s My Health, My Data Act recently expanded protections to cover sensitive health information outside of HIPAA. At the same time, California and other states are advancing reproductive health privacy rules, layering additional requirements on top of HIPAA and CCPA/CPRA.

So how can healthcare providers contend with a regulatory environment that has never been more fragmented?

The common assumption is that stricter rules inevitably impedes performance, by limiting an organization’s ability to track, measure, and reach audiences. But experiences across healthcare providers, payers, and medtech firms suggest that that assumption is not necessarily true: privacy-fi