Who Owns a Teenager’s Health Data?

Most people would probably answer that question like this: the teenager themselves, obviously (and no one else). But there would be no blog article if this was the case.

A teenager opens a health app to track a period, searches online for information about a health concern, or uses a digital service to learn more about their body. It may feel like a private interaction, and to be honest, it probably should be. But the information created in the process can become part of a much larger digital record.

The question of who controls that information, and who can use it, is at the center of New York State legislation sponsored by State Senator Liz Krueger. The New York Health Information Privacy Act, first introduced as S.929 in January 2025 and revised as S.9269 in February 2026, seeks to give individuals greater control over health information collected by companies and digital services. The 2026 version passed both the Senate and Assembly in June 2026 but, as of September 2026, has not yet become law.

Teenagers are growing up in a world where a lot of things are increasingly digital. And while some aspects of technology seem common sense, like not sharing your address online or maybe making your instagram account private if you don’t want the whole world to see your photos, health information is more of an obscure topic. Apps can record information about menstrual cycles, symptoms, exercise, nutrition, mental well-being, and other aspects of a person's life. They can also collect information about users' locations and online activity. As young people, teenagers don’t always realize what they enter into an app might not stay in the app.

This becomes particularly important when the information involves sensitive subjects—things that should definitely stay personal. Krueger's legislation specifically addresses categories including reproductive and sexual health information, genetic information, biometric information, and certain precise location data.

The proposed law would establish stronger rules for companies handling regulated health information. Among other provisions, it would:

• Mandate explicit user authorization before tech firms process sensitive records

• Allow users to revoke consent at any time

• Restrict data brokers from selling sensitive records to outside parties

• Grant consumers clear rights to review and delete their stored records

• Require platforms to provide straightforward explanations of data handling practices

• Provide legal resources whenever individual privacy rights are violated

This issue strikes particularly close for young women given the massive volume of reproductive records logged online. Krueger's justification points to concerns about menstrual-tracking data being sold or otherwise disclosed to third parties.

The legislation is part of a larger debate over digital privacy and consumer health data. There is debate on whether voluntarily given information into a consumer health application should remain under meaningful control of the person who provided it; that is a much larger issue to discuss. Technology has made it easier than ever to access health information and services, which can and should be genuinely beneficial. Getting advice and staying up to date on your health is important, and apps make that convenient in your day to day. But for teenagers, it’s important to know the risks. One way to do that is by staying educated on legislation like S.929.