State RegulationsNY specificDifficulty 2/5
Which statement correctly describes New York's consumer privacy regulation, Reg 169 (11 NYCRR Part 420)?
Select an option to reveal the answer and the full 3-part explanation — free, no signup.
Answer & full 3-part explanation (select an option above, or peek)
Why B is correct
Under Reg 169 (11 NYCRR Part 420), New York regulates the privacy of consumer health information held by insurers and other licensees: covered entities must give consumers notice of their information practices and must limit the use and disclosure of health information to what the regulation, the consumer's authorization, or law permits. The Superintendent of Financial Services enforces the regulation.
Why the other options are wrong
- A) Reg 169 is not limited to health maintenance organizations; it reaches insurers and licensees that hold consumers' health information.
- C) Issuance of a policy does not unlock third-party disclosure; Reg 169 restricts how consumer health information may be used and disclosed.
- D) Reg 169 is a New York regulation enforced by the Superintendent of Financial Services, not an exclusively federal regime.
Memory hook
Reg 169: health data gets notice-of-practices and limited disclosure.