On November 4, 2025, Sen. Bill Cassidy (R-LA) introduced the Health Information Privacy Reform Act, which requires the Secretary of Health and Human Services (HHS) to promulgate regulations setting privacy, security, and breach notification standards for the processing of applicable health information by regulated entities and their service providers. The Act includes a requirement for the Secretary of HHS to publish, no later than one year after the enactment of the Act, guidance on applying the minimum necessary standard to health data used in AI.