New York Period Tracker Privacy Laws (2026)

New York has strong reproductive privacy protections. But period tracker data still has gaps. Full 2026 legal breakdown.

Abortion access is protected by state law in New York. Period tracker data faces low subpoena risk, supported by moderate state data protections and a strong shield law.

This page is educational, not legal advice. Laws and enforcement practices can change; verify current rules with official state sources or a qualified attorney before relying on this information.

Abortion Law Status in New York

Abortion is protected by state law in New York. The Reproductive Health Act (2019) codified abortion rights in state law. It protects access up to 24 weeks and permits later abortions when necessary for the health or life of the mother. New York also removed abortion from the penal code, eliminating criminal penalties for providers. In 2023, New York enacted a shield law protecting providers and patients from out-of-state legal actions related to legal abortion services.

Period Tracker Data Risk in New York

Period tracker data in New York faces low subpoena risk. New York's SHIELD Act classifies health data as private information and imposes data security requirements on companies that collect it. The state's shield law creates barriers to out-of-state subpoenas related to abortion investigations. New York is a major destination state for patients traveling from restrictive states. Its legal framework reflects that role with meaningful protections for reproductive healthcare and the data associated with it.

Federal Protection Status

The HIPAA Reproductive Privacy Rule would have blocked disclosure of protected health information for investigating lawful reproductive healthcare. A federal court in Texas vacated it nationwide on June 18, 2025. HHS declined to appeal. Biden-era executive orders directing FTC and HHS action on reproductive data privacy were revoked on January 24, 2025. A ClearDATA/Harris Poll survey (May 2023, n=2,053) found 81% of Americans wrongly believe HIPAA covers health apps. It does not. Period tracker apps are not healthcare providers and fall entirely outside HIPAA regardless of state. There is no federal floor for reproductive health data protection.

Key facts

State: New York
Abortion law: protected
Data protection: moderate
Subpoena risk: low

New York codified abortion rights through the Reproductive Health Act in 2019.
The SHIELD Act classifies health data including reproductive information as protected private information.
New York's abortion shield law protects against out-of-state legal actions related to legal abortion services.
New York serves as a major destination state for patients from the South and Midwest.
New York City-based tech companies operating period tracking apps are subject to New York's data protections.

Definitions

Subpoena: A court order that can require a person or company to produce documents or data. Period tracker apps that store readable data on their servers can receive subpoenas. Local-first apps reduce what the company can produce.
Reproductive data: Health information related to menstrual cycles, pregnancy, fertility, and related symptoms. This data is not protected by HIPAA when held by period tracker apps, meaning standard federal health privacy law does not apply.
On-device storage: A privacy architecture where core cycle records stay local-first. Optional encrypted sync may send unreadable ciphertext. Because there is no readable central cycle database, company-directed requests should have less core cycle data to retrieve. Device access and operational records are separate risks.

Cited signals

$59.5M class action settlement against Flo for sharing user reproductive health data with Facebook and Google Reuters, September 25, 2025
Period tracker apps collect an average of 50+ data points per cycle including symptoms, mood, sexual activity, and medication use Norwegian Consumer Council, 2020

Relevant laws

New York Reproductive Health Act (2019)

Codifies abortion rights in New York state law, protecting access up to 24 weeks and beyond for health and life of the mother. Removes abortion from the penal code.

Read statute

New York SHIELD Act (2019)

New York's Stop Hacks and Improve Electronic Data Security Act expands data breach notification and security requirements. Health data is classified as private information.

New York Abortion Shield Law (2023)

Protects New York healthcare providers and patients from out-of-state legal actions related to abortion services performed legally in New York.

Quick answers to the obvious questions.

Does New York's SHIELD Act cover period tracker app data?

Yes. New York's SHIELD Act classifies health data as private information. Period tracking app companies with New York users must implement data security protections for health data including reproductive health information.

Can out-of-state prosecutors subpoena period tracker data from New York app companies?

New York's shield law protects against out-of-state abortion-related legal actions. Period tracking app companies based in New York are protected from complying with subpoenas from prosecutors in states with abortion bans.

Questions people ask before they switch.

Is period tracker data safe in New York?

New York is a low-risk state for period tracker users. Abortion is protected, the state has data security laws covering health information, and a shield law prevents out-of-state abortion-related legal actions.

Does New York's SHIELD Act protect period tracker data?

New York's SHIELD Act classifies health data as private information and imposes data security requirements on companies that collect it. Period tracking apps serving New York users must meet these security standards.

Can other states access period tracker data from New York companies?

New York's shield law creates legal barriers to out-of-state subpoenas related to abortion. New York-based companies have a legal basis to resist such requests.

Does federal law protect my period tracker data in New York?

No federal law covers period tracker data. New York's combination of protections creates meaningful state-level coverage. The SHIELD Act imposes data security requirements. The 2023 abortion shield law blocks out-of-state legal actions. The Reproductive Health Act codifies abortion rights in statute. Out-of-state prosecutors generally cannot reach New York-based app companies. The limitation is data held by companies headquartered in states without these protections.