Beyond HIPAA: Navigating the ‘More Stringent’ Standard

In light of the February 16, 2026, deadline for covered entities to update their notice of privacy practices (NPP), covered entities should consider “more stringent” state laws that may apply to these updated forms and require compliance. The federal Health Insurance Portability and Accountability Act (HIPAA) privacy rule sets the floor for privacy protections and individuals’ rights when it comes to their individually identifiable health information but allows for states to enact stronger or...