New York health care law regulates who can practice, what insurers must cover, how patient information stays private, and how patients can push back when something goes wrong. The state builds its own protections on top of federal rules like HIPAA and the No Surprises Act, and in several areas it goes further: a $35 monthly insulin copay cap took effect January 1, 2026, contraception is covered with no cost-sharing, and one of the country’s earliest surprise billing laws has been on the books since before the federal version arrived in 2022.
Who Can Legally Practice
The New York State Education Department’s Office of the Professions licenses more than 50 health care professions under Title VIII of the Education Law, including physicians, nurses, dentists, pharmacists, psychologists, social workers, and acupuncturists.1New York State Senate. New York Education Law Title 8 – The Professions
Physicians need an M.D. or D.O. from an accredited program, a passing score on the USMLE or COMLEX-USA, and at least one year of postgraduate residency. Applicants must be at least 21, show good moral character, and meet citizenship or immigration requirements, though the Board of Regents can waive that last condition for noncitizen physicians serving medically underserved areas.2New York State Senate. New York Education Law EDN 6524 – Requirements for a License as a Physician New York does not require a set number of continuing medical education hours for renewal. It does require infection control training every four years.3New York State Education Department. Mandated Training Related to Infection Control
Registered nurses must pass the NCLEX-RN, complete the same infection control coursework every four years, and take a one-time course in child abuse identification. Physician assistants must graduate from an ARC-PA-accredited program and pass the PANCE.4National Commission on Certification of Physician Assistants. Become Certified
Facility Operating Certificates
Hospitals, nursing homes, and diagnostic treatment centers cannot open without an operating certificate from the New York State Department of Health under Article 28 of the Public Health Law. The department reviews whether premises, equipment, personnel, and standards of care are adequate before approving.5New York State Senate. New York Code PBH 2805 – Approval of Hospitals and Operating Certificates Each site of care delivery, including extension clinics, needs its own certificate specifying the services approved there.6Legal Information Institute. New York Codes Rules and Regulations Title 10 Section 401.1 – Issuance of Operating Certificates Operating without one can result in a shutdown.
Controlled Substance Prescribing
The Internet System for Tracking Over-Prescribing (I-STOP) has required most prescribers to check the state’s Prescription Monitoring Program registry before writing prescriptions for Schedule II, III, or IV controlled substances since 2013. Practitioners may authorize staff designees to check on their behalf. Veterinarians are exempt.7New York State Department of Health. PMP/I-STOP Prescription Monitoring Program
What Health Insurance Must Cover
The Department of Financial Services (DFS) enforces coverage mandates that reach further than the federal floor set by the Affordable Care Act. These apply to most commercial and employer-sponsored plans, though self-funded employer plans are governed by federal law.
Insulin and Prescription Drugs
As of January 1, 2026, New York caps what insured patients pay for prescription insulin at $35 per 30-day supply, regardless of the type or amount prescribed. The previous cap was $100. The new limit applies to most group plans, though patients on high-deductible plans paired with health savings accounts may still pay full price until they meet their annual deductible. New York also regulates step therapy: insurers must follow specific rules when requiring patients to try lower-cost drugs first, and denied override requests can be appealed through the standard utilization review process.8New York State Department of Financial Services. FAQ About Step Therapy Legislation
Contraception, IVF, and Cancer Screenings
The Comprehensive Contraception Coverage Act requires plans to cover all FDA-approved contraceptive methods with no copay or deductible, including emergency contraception and up to a 12-month supply of birth control dispensed at once.9Office of the New York State Attorney General. Attorney General James Demands Health Insurance Providers Obey the Law Large-group plans covering more than 100 employees must pay for up to three IVF cycles when used to treat infertility.10Department of Financial Services. FAQ – IVF and Fertility Preservation Law Guidance for Issuers
Breast cancer screening law requires most plans to cover mammograms, diagnostic imaging, ultrasounds, and breast MRIs with no cost-sharing. That includes a baseline mammogram for individuals aged 35 to 39, annual mammograms starting at 40, and mammograms at any age for those with a family history or a prior diagnosis.11New York State Department of Health. New York State Breast Cancer Screening Law
Mental Health Parity
Timothy’s Law and the federal Mental Health Parity and Addiction Equity Act together require most comprehensive plans to cover medically necessary mental health and substance use disorder treatment on the same terms as medical and surgical benefits. Plans cannot impose tighter visit limits, copays, or prior-authorization requirements on behavioral health.12Office of Mental Health. Behavioral Health Parity Federal parity law does not force plans to offer mental health benefits, but the ACA requires non-grandfathered individual and small-group plans to include them as an essential health benefit.13CMS. The Mental Health Parity and Addiction Equity Act
The Essential Plan
Residents aged 19 to 64 who earn too much for Medicaid but fall within certain income limits can enroll in the Essential Plan through the state marketplace. There is no monthly premium and no deductible, and the plan covers dental, vision, prescription drugs, inpatient care, and behavioral health. Primary care and preventive visits cost nothing for lower-income enrollees, and enrollment is open year-round.14NY State of Health. Essential Plan Information
Surprise Billing Protections
New York’s surprise billing law predates the federal No Surprises Act. Under state Financial Services Law, a surprise bill includes charges from an out-of-network provider at an in-network hospital when the patient did not know or choose that provider, or when a participating physician refers a patient to an out-of-network provider without explicit written consent acknowledging the potential costs.15New York State Senate. New York Financial Services Law 603 – Definitions
A patient who receives a surprise bill can assign benefits to the out-of-network provider, which takes the patient out of the payment fight entirely. The provider and insurer then use an independent dispute resolution (IDR) process overseen by DFS. A trained neutral reviewer picks either the insurer’s payment or the provider’s fee as the reasonable charge, and the losing side pays for the resolution.16New York Codes, Rules and Regulations. Independent Dispute Resolution for Emergency Services and Surprise Bills
The federal No Surprises Act adds protection for patients covered by self-funded employer plans that state insurance law doesn’t reach. Patients cannot be balance-billed for out-of-network emergency care and owe only their in-network cost-sharing. Air ambulance services get similar protection; ground ambulances do not. Federal disputes go through a similar IDR structure where a certified entity picks one of the two payment offers.17Centers for Medicare & Medicaid Services. About Independent Dispute Resolution
Patient Rights, Consent, and Records
Every general hospital in New York must adopt and publicize a Patient Bill of Rights under Section 2803 of the Public Health Law. Patients have the right to treatment without discrimination based on race, color, religion, sex, gender identity, national origin, disability, sexual orientation, age, or source of payment.18New York State Department of Health. New York State Hospital Patients Bill of Rights The statute also guarantees the right to receive the information needed to give informed consent before any procedure, along with the right to refuse treatment after being told the consequences.19New York State Senate. New York Public Health Law PBH 2803
When a patient cannot make decisions and has no advance directive, the Family Health Care Decisions Act allows a surrogate to step in. The priority order runs from a court-appointed guardian to a spouse or domestic partner, adult children, parents, adult siblings, and close friends. A surrogate can make any health care decision the patient could have made, including decisions about life-sustaining treatment, though withdrawing life support requires meeting additional statutory conditions.20New York State Senate. New York Public Health Law 2994-D – Health Care Decisions for Adult Patients by Surrogates
Getting Your Medical Records
Under Public Health Law Section 18, providers must give you the chance to inspect your records within 10 days of a written request and provide copies within a reasonable time. A provider cannot deny access because you owe money, and no fee applies when the records support an application for a government benefit or program.21New York State Department of Health. Department of Health Memorandum – Access to Patient Information The federal 21st Century Cures Act reinforces this by prohibiting providers from unreasonably interfering with access to electronic health information.22Assistant Secretary for Technology Policy. Information Blocking
Telehealth
New York defines telehealth broadly under Public Health Law Section 2999-cc to include live video, store-and-forward transmission of images or data for later review, remote patient monitoring, and audio-only telephone communication.23New York State Senate. New York Public Health Law 2999-CC – Definitions Only licensed professionals such as physicians, nurse practitioners, and psychologists can deliver telehealth services, and the standard of care is the same as for in-person visits.
New York Medicaid covers all four modalities, including audio-only calls, which expanded access for patients without reliable internet.24New York State Department of Health. New York State Medicaid Telehealth Commercial insurers must also cover telehealth. For prescribing controlled substances by telehealth, the DEA has extended pandemic-era flexibilities through December 31, 2026, allowing prescriptions without a prior in-person visit while permanent rules are finalized. Prescriptions must still be for legitimate medical purposes and comply with federal and state law.25HHS.gov. HHS and DEA Extend Telemedicine Flexibilities for Prescribing Controlled Medications Through 2026
Privacy and Data Security
New York stacks its own privacy protections on top of federal HIPAA. The Stop Hacks and Improve Electronic Data Security (SHIELD) Act requires any business that holds private information, including health care entities, to maintain administrative, technical, and physical safeguards. After a breach, the organization must notify affected individuals, the New York Attorney General, and, for larger breaches, consumer reporting agencies and prominent media outlets. Failure to notify runs up to $20 per affected individual, capped at $250,000, while failing to maintain reasonable safeguards can cost $5,000 per violation.26New York State Attorney General. Stop Hacks and Improve Electronic Data Security Act
Psychiatric records get an extra layer under the Mental Hygiene Law. Clinical records from mental health facilities generally cannot be released outside the treating facility without the patient’s consent. The exceptions are narrow: court orders where the interests of justice significantly outweigh confidentiality, disclosures to the Mental Hygiene Legal Service, notifications to law enforcement when a treating psychiatrist determines a patient poses a serious and imminent danger to an identifiable person, and a handful of other situations spelled out in the statute.27New York State Senate. New York Mental Hygiene Law 33.13 – Clinical Records and Confidentiality
Medical Malpractice Deadlines and Standards
To sue a New York health care provider for malpractice, you must show the provider fell below the accepted standard of care and that the deviation directly caused your injury. The plaintiff’s attorney must file a certificate of merit with the complaint, certifying that they consulted with a licensed physician (or dentist or podiatrist, depending on the claim) and concluded there is a reasonable basis for the action.28New York State Senate. New York Code CVP 3012-A – Certificate of Merit in Medical Malpractice Actions At trial, a lack-of-informed-consent theory requires expert medical testimony.29New York State Senate. New York CPLR 4401-A – Motion for Judgment
The statute of limitations is two years and six months from the date of the alleged malpractice, or from the last treatment when there was continuous care for the same condition. Two exceptions matter:
- Foreign objects. If a surgical instrument or similar object is left in your body, you have one year from the date you discover it, or reasonably should have. Fixation devices and prosthetics do not count.
- Cancer misdiagnosis (Lavern’s Law). The clock starts when you know or reasonably should have known about the failure to diagnose a malignant tumor or cancer, rather than from the date of the error itself. No case can be filed more than seven years after the original act of negligence.
Both exceptions appear in CPLR 214-a.30New York State Senate. New York CPLR 214-A – Action for Medical Malpractice Statute of Limitations New York does not cap malpractice damages, so juries have full discretion over compensation. For birth injury cases involving neurological impairments caused by malpractice during delivery, the Medical Indemnity Fund provides a separate funding source for the child’s future health care costs.31New York State Department of Health. Medical Indemnity Fund
Health Care Fraud Penalties
Article 177 of the Penal Law makes health care fraud a criminal offense in New York. The offense is defined as knowingly submitting false information or omitting material facts to receive payment from a health plan for services the person was not entitled to bill. Penalties scale by the total wrongfully received from a single health plan within one year:
- Fifth degree (up to $3,000): Class A misdemeanor.
- Fourth degree (over $3,000): Class E felony.
- Third degree (over $10,000): Class D felony.
- Second degree (over $50,000): Class C felony.
- First degree (over $1 million): Class B felony.
Federal law adds another layer. The Anti-Kickback Statute makes it illegal to offer or receive anything of value in exchange for patient referrals involving federal health care programs, with regulatory safe harbors protecting certain legitimate arrangements.32Office of Inspector General. Safe Harbor Regulations The False Claims Act imposes civil penalties for each fraudulent claim plus triple the government’s actual damages.
Who Enforces What
The Department of Health enforces facility standards and physician conduct. Its Office of Professional Medical Conduct investigates complaints against physicians and physician assistants, covering clinical incompetence, substance abuse, and fraudulent billing. The State Board for Professional Medical Conduct conducts disciplinary proceedings and can revoke licenses, impose probation, or require medical or psychiatric evaluation.33New York State Senate. New York Public Health Law 230 – State Board for Professional Medical Conduct
The Department of Financial Services regulates health insurance, enforces coverage mandates, and runs the surprise billing IDR process. The Attorney General’s Health Care Bureau handles consumer complaints about medical billing and insurance denials, including a helpline for improper charges. Malpractice payments, adverse credentialing actions, and license sanctions are reported to the federal National Practitioner Data Bank within 30 days.34National Practitioner Data Bank. What You Must Report to the NPDB