Behavioral Health Marketing Laws: What Clinicians and Treatment Providers Need to Know
· 23 min read
Marketing a therapy practice, psychiatric clinic, addiction treatment program, or other behavioral health organization requires more than effective advertising. Providers and their marketing partners must navigate laws governing patient referrals, advertising claims, health information, testimonials, phone and text outreach, online tracking, and professional licensing.
The rules vary according to the provider, services, payment sources, marketing methods, and states involved. However, one principle applies nationwide: marketing should inform patients—not mislead them, compromise their privacy, or financially reward someone for steering them into treatment.
Important: This article provides general educational information and is not legal advice. Behavioral health organizations should have qualified healthcare counsel review their contracts, campaigns, compensation arrangements, intake processes, and privacy practices.
Why Behavioral Health Marketing Is Different
Behavioral health marketing operates in a highly regulated environment because it involves healthcare decisions, vulnerable populations, sensitive personal information, and, in many cases, insurance reimbursement. A marketing practice that is common in another industry—such as paying an affiliate for each completed sale—may create serious legal exposure when the “sale” is a patient admission.
The risk is especially high in addiction treatment. Federal and state authorities have pursued arrangements involving paid patient referrals, deceptive treatment-center websites, undisclosed call centers, insurance-based lead qualification, and compensation tied to admissions or reimbursements.12
Behavioral health organizations should evaluate marketing through five core questions:
- Is anyone being compensated for referring, steering, or admitting a patient?
- Are all treatment, credential, location, outcome, and insurance claims accurate?
- Is patient or prospective-patient information being used lawfully?
- Did the person provide legally sufficient consent for calls, texts, email, or data sharing?
- Do state licensing, privacy, and patient-brokering laws impose additional restrictions?
Federal Anti-Kickback Laws
Eliminating Kickbacks in Recovery Act
The Eliminating Kickbacks in Recovery Act, commonly called EKRA, is one of the most important federal laws affecting addiction treatment marketing. It generally prohibits knowingly and willfully offering, paying, soliciting, or receiving remuneration in exchange for referring a patient to a recovery home, clinical treatment facility, or laboratory—or in exchange for an individual using those services.3
Unlike the federal Anti-Kickback Statute discussed below, EKRA is not limited to services paid for by Medicare or Medicaid. Its language reaches services covered by a broadly defined healthcare benefit program, making it relevant to many commercially insured treatment arrangements.43
Potentially dangerous compensation structures include:
- Payment for each patient admitted
- Payment for each completed assessment or insurance verification
- Bonuses tied to admissions, census, treatment duration, or collections
- Percentage-of-revenue marketing agreements
- Payments that vary according to insurance benefits or reimbursement
- “Qualified lead” fees that function as payment for patient steering
EKRA contains statutory exceptions, including one involving bona fide employees and independent contractors. However, that exception does not protect compensation determined by the number of referred individuals, the number of tests or procedures performed, or the amounts billed or received.3
A flat monthly marketing fee may reduce certain risks, but it is not automatically lawful. Regulators may examine the arrangement’s actual purpose, economic substance, referral activity, lead-routing process, and relationship to patient volume.
Federal Anti-Kickback Statute
The federal Anti-Kickback Statute, or AKS, prohibits knowingly and willfully offering, paying, soliciting, or receiving remuneration to induce or reward referrals involving federal healthcare program business. Remuneration can include cash, gifts, free services, excessive consulting payments, housing, transportation, waived financial obligations, and other things of value.5
The statute has regulatory safe harbors for qualifying arrangements, but an arrangement must satisfy every condition of the relevant safe harbor to receive that protection. Behavioral health providers participating in Medicare, Medicaid, TRICARE, or another federal healthcare program should obtain specialized legal review before entering referral, outreach, medical-director, co-marketing, or patient-assistance arrangements.6
Patient Inducements
Marketing campaigns sometimes offer prospective patients transportation, lodging, phones, gift cards, waived copayments, or other benefits. These offers may implicate federal beneficiary-inducement rules when they are likely to influence a Medicare or state-program beneficiary’s selection of a provider.5
Patient assistance is not always prohibited, but it should never be treated as an ordinary promotional giveaway. The provider should document the legal basis, eligibility criteria, purpose, value, and administration of the benefit before advertising it.
Stark Law
The federal physician self-referral law, commonly called the Stark Law, restricts physician referrals for certain Medicare-payable designated health services when the physician or an immediate family member has a financial relationship with the entity receiving the referral, unless an exception applies.78
Stark is not the primary marketing law for every therapy practice or behavioral health provider. It can nevertheless become relevant when a campaign involves physician ownership, medical-director compensation, laboratory services, hospital services, prescription drugs, or other designated health services.
False Claims Act
Marketing conduct can also create liability under the federal False Claims Act when it contributes to false claims for government payment. Risk may arise from kickback-tainted referrals, medically unnecessary treatment, false eligibility statements, fabricated documentation, or billing for services that were not provided.9
Intake and marketing personnel should never guarantee coverage, exaggerate clinical necessity, coach patients to misstate symptoms, or pressure clinicians to admit or retain patients for financial reasons.
Truthful Advertising Rules
FTC Act
Section 5 of the Federal Trade Commission Act prohibits unfair or deceptive commercial practices. Behavioral health advertisements must be truthful, must not omit information that would make the message misleading, and must have adequate support for objective claims.10
This standard applies across websites, search ads, social media, landing pages, videos, directories, email, printed materials, influencer campaigns, and call-center scripts. Regulators consider the advertisement’s overall impression—not just whether each individual sentence is technically true.
Claims requiring careful review include:
- “Evidence-based treatment”
- “Clinically proven”
- “Guaranteed recovery”
- “100% success rate”
- “The best treatment center”
- “Most trusted therapist”
- “Covered by your insurance”
- “No out-of-pocket cost”
- “Immediate appointments available”
- “Licensed clinicians available 24/7”
A provider should retain evidence supporting measurable claims and promptly remove advertising when services, locations, clinicians, hours, credentials, or insurance relationships change.
Testimonials and Reviews
Patient testimonials are both advertising content and potentially protected health information. The FTC requires endorsements to reflect honest experiences, prohibits deceptive reviews, and requires clear disclosure of material relationships between an endorser and advertiser.11
A testimonial that communicates a treatment outcome can require the same substantiation as a direct claim made by the provider. A small-print statement such as “results not typical” may not correct an advertisement that otherwise suggests most patients will achieve the featured result.12
Before publishing a patient story, photo, video, diagnosis, or treatment experience, providers should obtain a legally sufficient written authorization. Organizations must also review the rules of the applicable professional licensing board because some states and professions impose additional testimonial restrictions.
Avoid:
- Purchasing fake reviews
- Having employees pose as patients
- Offering undisclosed incentives for positive reviews
- Suppressing negative feedback deceptively
- Writing testimonials for patients
- Revealing a reviewer’s patient status when responding publicly
- Turning a patient’s general media release into permission for every advertising use
HIPAA and Patient Privacy
HIPAA Marketing Rules
The HIPAA Privacy Rule limits the use and disclosure of protected health information for marketing by covered entities and business associates. A written authorization is generally required for marketing uses of PHI, subject to limited exceptions. When the covered entity receives financial remuneration from a third party for the marketing communication, the authorization must disclose that fact.1314
Common high-risk practices include:
- Uploading patient lists to advertising platforms
- Creating retargeting audiences from patient portal activity
- Sending diagnosis or treatment-interest data to lead vendors
- Allowing a call center to access PHI without an appropriate agreement
- Using patient images or stories without a specific authorization
- Sharing intake details with unrelated marketing partners
A business associate agreement may be necessary when a vendor handles PHI on behalf of a covered entity. However, signing a BAA does not transform an otherwise prohibited marketing use into a permitted one.
42 CFR Part 2
Providers that qualify as federally regulated substance use disorder programs must also consider 42 CFR Part 2, which protects the confidentiality of SUD patient records. The rules generally require patient consent or another recognized legal basis before covered records can be disclosed.15
The 2024 federal rule aligned parts of Part 2 with HIPAA and permits a single consent for certain treatment, payment, and healthcare-operations uses. That consent should not be interpreted as blanket permission to use SUD information for advertising, retargeting, list building, or unrelated outreach. Compliance with the updated rule was required by February 16, 2026.15
SUD providers should apply enhanced controls to intake forms, call recordings, CRM records, insurance-verification information, alumni lists, assessment tools, analytics, and vendor access.
Tracking and Analytics
Pixels, cookies, session-replay software, chat widgets, call tracking, and analytics tools can transmit information about website visitors to third parties. The compliance risk increases when these technologies operate on appointment pages, patient portals, online assessments, insurance-verification forms, symptom pages, or condition-specific landing pages.
HIPAA-regulated organizations must evaluate whether a tracking vendor receives PHI and whether the proposed disclosure is permitted. HHS has specifically addressed HIPAA obligations involving cookies, pixels, and similar online tracking technologies.16
Organizations outside HIPAA may still face liability under the FTC Act, the FTC Health Breach Notification Rule, and state consumer-health privacy laws. The FTC’s modernized Health Breach Notification Rule expressly addresses health apps and similar technologies that are not traditional HIPAA-covered providers.1718
A proper tracking-technology review should identify:
- Every tag, pixel, cookie, software development kit, and embedded script
- The pages and form fields where each technology operates
- The exact information transmitted
- Each recipient and downstream use
- Whether the vendor uses the information for its own advertising purposes
- Whether consent, authorization, contractual protection, or removal is required
Calls, Texts, and Email
TCPA and Do-Not-Call Rules
The Telephone Consumer Protection Act and related FCC rules regulate marketing calls, text messages, prerecorded messages, artificial voices, and certain automated communications. Telemarketing robocalls generally require prior express written consent, and federal Do-Not-Call requirements apply to many live marketing calls as well.1920
Behavioral health marketers should not assume that a person who completed an online form consented to calls or texts from an unlimited number of treatment providers. Consent language should clearly identify the communications, brands, and technologies involved. Providers should retain consent evidence and promptly honor revocation, STOP requests, and internal do-not-call requests.
Outbound campaigns should include controls for:
- Federal and applicable state do-not-call lists
- Time-of-day restrictions
- Caller identification
- Consent capture and storage
- Consent revocation
- Text-message opt-outs
- Prerecorded or AI-generated voice calls
- Reassigned phone numbers
- Vendor and affiliate activity
- State call-recording consent laws
CAN-SPAM
The CAN-SPAM Act governs commercial email. It requires accurate sender and subject information, a valid physical mailing address, and a functioning opt-out method, among other obligations.21
Behavioral health organizations should avoid misleading subject lines, hidden sender identities, and email campaigns that reveal a person’s treatment status or diagnosis. Unsubscribe requests should be honored throughout the organization’s marketing systems—not merely removed from one isolated campaign.
Children and Teen Marketing
The Children’s Online Privacy Protection Act, or COPPA, applies to covered websites and online services directed to children under 13, as well as services with actual knowledge that they collect personal information from children under 13. Covered collection, use, or disclosure generally requires notice and verifiable parental consent.2223
Youth-oriented mental health quizzes, apps, communities, chat services, and intake tools require particular care. Updated COPPA requirements further restrict certain disclosures used for targeted advertising and require separate parental opt-in consent in covered circumstances.24
COPPA is not the only concern. Providers must also examine state minor-consent rules, parental-access laws, professional confidentiality duties, school privacy laws, and state consumer privacy statutes.
Accessibility and Nondiscrimination
Behavioral health marketing and admissions practices must comply with applicable civil-rights laws. Section 1557 of the Affordable Care Act prohibits discrimination based on race, color, national origin, sex, age, or disability in covered health programs and activities.2526
The Americans with Disabilities Act may protect people who are in recovery from opioid use disorder and are not currently engaging in illegal drug use. This can include individuals lawfully taking prescribed medications for opioid use disorder.2728
Potential problem areas include:
- Categorically refusing patients who use medication for opioid use disorder
- Using admissions criteria that unlawfully screen out people with disabilities
- Publishing inaccessible websites, forms, or videos
- Failing to provide meaningful language access when required
- Using imagery or copy that suggests protected groups are unwelcome
- Targeting or excluding audiences based on protected characteristics without a lawful basis
State Marketing Laws
Federal compliance is only the starting point. States regulate healthcare advertising through patient-brokering statutes, professional licensing rules, fee-splitting prohibitions, treatment-facility laws, privacy statutes, telemarketing laws, consumer-protection acts, title restrictions, and rules governing testimonials and professional claims.
A campaign can trigger the laws of more than one state—for example, where the provider is located, where the patient lives, where the marketer operates, and where calls or data are processed. A multistate campaign therefore requires a state-by-state review rather than relying solely on the provider’s home-state rules.
Patient-Brokering Laws
Several states have enacted laws specifically addressing patient brokering in addiction treatment or healthcare. Although the wording and exceptions differ, these laws commonly prohibit paying or receiving commissions, kickbacks, benefits, or split fees for patient referrals.
Examples include:
- Florida: Florida prohibits patient brokering and deceptive SUD marketing practices. Its laws address false location or service claims, undisclosed call-center relationships, deceptive redirects, and other misleading lead-generation tactics. Certain third-party substance-abuse marketing providers must obtain a Florida telemarketing license even when operating outside the state.293031
- California: California prohibits covered SUD providers and associated persons from giving or receiving value for patient referrals. It also restricts false statements about services, locations, staff, affiliations, and websites and requires certain licensing disclosures in advertising.3233
- New York: New York restricts consideration for SUD referrals and regulates marketers who represent treatment providers. Marketing representatives may be required to identify the provider, disclose their marketing role, and avoid presenting themselves as clinicians.3435
- New Jersey: New Jersey prohibits deceptive SUD marketing claims and restricts referral compensation tied to patient numbers, services, treatment duration, or carrier benefits.3637
- North Carolina: North Carolina prohibits covered treatment providers, facilities, recovery residences, laboratories, and third parties from exchanging value or split fees to induce SUD referrals.38
- Arizona: Arizona prohibits commissions, bonuses, rebates, kickbacks, bribes, and split fees involving referrals to or from SUD treatment facilities and sober-living homes.3940
These examples are not a complete list. A state without a law labeled “patient brokering” may still prohibit the conduct through professional fee-splitting laws, insurance-fraud statutes, healthcare-fraud laws, or licensing-board rules.
Consumer Health Privacy
State privacy laws increasingly regulate health-related information outside traditional medical records. Washington’s My Health My Data Act, for example, governs broadly defined consumer health data and restricts collection, sharing, sale, and geofencing around healthcare facilities.41
California also gives qualifying consumers rights involving sensitive personal information and the sale or sharing of data for cross-context behavioral advertising. Similar comprehensive privacy laws in other states can affect mental-health quizzes, intake funnels, audience matching, conversion tracking, location information, and data-broker relationships.4243
Professional Licensing Rules
Every campaign should be reviewed against the rules of the profession involved. Psychologists, psychiatrists, counselors, social workers, marriage and family therapists, nurses, addiction counselors, and telehealth professionals may be subject to different advertising requirements.
Common restrictions include:
- Misrepresenting credentials or specialties
- Using protected professional titles without a license
- Claiming superiority without verification
- Advertising services outside the clinician’s scope of practice
- Failing to identify the responsible professional or practice
- Offering referral fees or splitting professional fees improperly
- Misleading patients about office location or telehealth availability
- Using testimonials in a manner prohibited by a licensing board
Safer Marketing Agreements
Behavioral health marketing contracts should define legitimate promotional services rather than rewarding patient acquisition. Compensation should ordinarily be fixed in advance, commercially reasonable, supported by fair-market-value analysis when appropriate, and independent of referrals, admissions, treatment duration, payer type, tests, billed charges, and collections.
Important contract provisions include:
- Specific services, deliverables, channels, territories, and brands
- A fixed compensation methodology unrelated to patient volume or value
- Prohibition on patient brokering, steering, and unauthorized referral activity
- Prohibition on clinical advice or insurance guarantees by marketers
- Required disclosure of marketer, call-center, and provider relationships
- Provider approval of claims, scripts, landing pages, listings, and ad creative
- HIPAA, Part 2, state privacy, security, and breach-response obligations
- TCPA, email, do-not-call, recording, and consent requirements
- Restrictions on subcontractors, affiliates, and purchased leads
- Audit rights and record-retention requirements
- Immediate suspension and termination rights for compliance concerns
Calling an arrangement “consulting,” “SEO,” “business development,” or “lead generation” will not protect it if the actual payment is for referring or steering patients.
Marketing Compliance Checklist
Before launching a behavioral health campaign, confirm the following:
- Every facility, office, clinician, credential, license, service, and location is accurate.
- Clinical, outcome, superiority, and insurance claims have current written support.
- Marketing compensation is not tied to referrals, admissions, patient value, treatment duration, testing, billing, collections, or payer status.
- Lead sources and call centers disclose their identity and provider relationships when required.
- Testimonials are authentic, authorized, representative, and compliant with licensing rules.
- Website tracking tools have been reviewed under HIPAA, Part 2, FTC rules, and state privacy laws.
- Calls, texts, emails, and recordings comply with federal and applicable state consent rules.
- The organization maintains do-not-call, unsubscribe, and consent-revocation procedures.
- Patient benefits such as transportation, lodging, gifts, or waived charges have legal approval.
- Websites and intake processes satisfy applicable accessibility and nondiscrimination requirements.
- Every state connected to the campaign has been reviewed for patient-brokering, privacy, telemarketing, and professional-board requirements.
- Marketing partners are trained, monitored, and contractually required to follow the same standards.
Frequently Asked Questions
Can a behavioral health provider pay for leads?
Possibly, but this is a high-risk area. The answer depends on how “lead” is defined, how compensation is calculated, what the marketer does, the payer source, the type of provider, and the states involved. Paying for a name or inquiry can become an illegal referral arrangement when compensation depends on qualification, insurance benefits, transfer, assessment, placement, admission, or reimbursement.
Is pay-per-admission marketing legal?
It is generally one of the riskiest compensation models for behavioral health and addiction treatment. EKRA and multiple state patient-brokering laws can prohibit remuneration tied to referrals or treatment acceptance.29383
Can a practice use patient testimonials?
A practice may be able to use testimonials with valid authorization, truthful content, appropriate result disclosures, and compliance with professional-board rules. A testimonial release must adequately address the intended advertising use, and the practice should never disclose a reviewer’s patient status in a public response without authorization.
Does HIPAA apply to website visitors?
Not every website visit creates PHI, and not every behavioral health website is operated by a HIPAA-covered entity. However, visitor information may become regulated depending on the entity, page, user relationship, information disclosed, and tracking technology involved. State consumer-health privacy laws and FTC rules can still apply even when HIPAA does not.1816
Can clinicians run remarketing ads?
Remarketing is not automatically prohibited, but it requires careful review. A campaign should not disclose or imply a person’s diagnosis, treatment status, appointment activity, or use of a patient portal to an advertising platform without a lawful basis. Contextual advertising that does not depend on sensitive audience data may present less privacy risk.
Are fixed monthly marketing fees always safe?
No. Fixed compensation can be safer than pay-per-patient arrangements, but regulators may examine whether the amount is commercially reasonable, whether referrals are expected, and whether the marketer engages in prohibited steering. Substance and conduct matter more than the contract label.
Build Compliance Into Marketing
Effective behavioral health marketing can educate communities, reduce stigma, and connect people with appropriate care. It should also protect patient choice, preserve confidentiality, and accurately represent the provider’s services.
The safest approach is to build compliance into the campaign from the beginning. Before publishing ads or purchasing leads, behavioral health organizations should review compensation, claims, data flows, consent language, call handling, testimonials, accessibility, and every state connected to the campaign. Legal review is substantially easier—and usually less expensive—before an aggressive marketing strategy creates regulatory, licensing, contractual, or reputational exposure.
Legal disclaimer: This content is for general educational purposes only and does not constitute legal advice. Laws and agency guidance change, and their application depends on specific facts. Consult qualified healthcare and privacy counsel before implementing a behavioral health marketing, referral, lead-generation, telemarketing, or patient-assistance program.
References
California Addiction Treatment Facility Operator Convicted ... - A federal jury convicted a California man this week for paying illegal kickbacks for patient referra...
Hollywood Hills Man Sentenced to Nearly 3½ Years in ... - LOS ANGELES – A Hollywood Hills man was sentenced today to 41 months in federal prison for paying il...
18 USC 220: Illegal remunerations for referrals to recovery ...
Fact Sheet Final Rule: Revisions to the Safe Harbors ... - OIG - The Federal anti-kickback statute provides for criminal penalties for whoever knowingly and willfull...
Safe Harbor Regulations | Office of Inspector General - The "safe harbor" regulations describe various payment and business practices that, although they po...
Rural Emergency Hospitals Proposed Rulemaking - The physician self-referral law, commonly known as the “Stark Law ... designated health services. A ...
Definition of Entity | CMS - Learn the Stark Law definition of entity for physician self-referral compliance. Understand what qua...
Traditions Health Agrees to Pay $34M to Resolve False ... - The Anti-Kickback Statute prohibits the provision of remuneration to induce referrals of government ...
Health Claims | Federal Trade Commission - FTC has compiled a list of seven advertising claims that are likely to be a tip-off to deception. Ta...
Endorsements, Influencers, and Reviews - The FTC's Rule on the Use of Consumer Reviews and Testimonials addresses the persistent problem of f...
Guides Concerning the Use of Endorsements and ... - A disclosure such as, “Results not typical” or, “These testimonials are based on the experiences of ...
When is an authorization required from the patient before a ... - If the marketing communication involves direct or indirect remuneration to the covered entity from a...
Marketing - The HIPAA Privacy Rule excludes from the definition of “marketing” communications made to describe a...
Understanding Confidentiality of Substance Use Disorder ... - In 2024, HHS published a final rule updating 42 CFR part 2 as required by the CARES Act. The Final R...
Blog | Comisión Federal de Comercio - The just-announced Final Rule makes it clear that health apps and similar technologies are covered a...
Press Releases - FTC Finalizes Changes to the Health Breach Notification Rule. Date. April 26, 2024. The Federal Trad...
Telemarketing | Federal Communications Commission - In 2012, the Commission revised its TCPA rules to require callers to obtain prior express written co...
Robocalls, Caller ID Spoofing, Do-Not-Call Registry, and ... - The TCPA generally prohibits all non-emergency autodialed and prerecorded calls to cell phones unles...
FTC Completes Review of CAN-SPAM Rule - CAN-SPAM Rule, which establishes requirements for commercial e-mail messages and gives recipients th...
Children's Online Privacy Protection Rule ("COPPA") - COPPA imposes certain requirements on operators of websites or online services directed to children ...
Protecting Your Child's Privacy Online - FTC Consumer Advice - The COPPA Rule was put in place to protect kids' personal information on websites and online service...
FTC Finalizes Changes to Children's Privacy Rule Limiting ... - The COPPA Rule, which first went into effect in 2000, requires certain websites and other online ser...
Section 1557: Ensuring Meaningful Access for Individuals ... - Section 1557 prohibits discrimination on the grounds of race, color, national origin, sex, age, or d...
Section 1557: Ensuring Effective Communication with and ... - Section 1557 prohibits discrimination on the ground of race, color, national origin, sex, age, or di...
Opioid Use Disorder - This page provides some basic information about Opioid Use Disorder (OUD) and the ADA's protections ...
The ADA and Opioid Use Disorder: Combating ... - Information about how the ADA can protect individuals with OUD from discrimination — an important pa...
The 2026 Florida Statutes - Online Sunshine - The 2026 Florida Statutes. Title XLVI CRIMES. Chapter 817. FRAUDULENT PRACTICES. View Entire Chapter...
The 2026 Florida Statutes - Florida Legislature - View Entire Chapter. 397.55 Prohibition of deceptive marketing practices.—. (1) The Legislature reco...
Substance Abuse Marketing Service Provider - The Florida Telemarketing Act requires entities that provide substance abuse marketing services to b...
Medication Assisted Treatment Toolkit for Counselors - SB 1228 AND PATIENT BROKERING Patient brokering is the practice In 2018, California passed SB of giv...
New York Consolidated Laws, Mental Hygiene Law - MHY § 32.06 ... - New York Consolidated Laws, Mental Hygiene Law - MHY § 32.06 Prohibited practices by providers of su...
P.L. 2025, c.122 (A3974 3R) - This act shall take effect immediately. Prohibits use of deceptive marketing practices by substance ...
P.L. 2025, c.121 (A3973 1R) - Revises law concerning patient referrals to substance use disorder treatment facilities, recovery re...
SL 2023-141 (HB 415) - North Carolina General Assembly - "§ 90‐113.152. Patient brokering and kickbacks. (a) It is unlawful for any person or entity, includi...
Arizona Revised Statutes § 13-3730 (2018) - Unlawful patient ... - 13-3730. Unlawful patient brokering; classification; definition A. It is unlawful for a person, incl...
Arizona Revised Statutes Title 13. Criminal Code § 13-3730 ... - 1. Referring patients or clients to or from a sober living home or a substance use disorder treatmen...
Chapter 19.373 RCW: - Washington State Government - Washingtonians expect that their health data is protected under laws like the health information por...
Frequently Asked Questions (FAQs) - California Privacy ... - O – Right to OPT–OUT of sale or sharing: You may request businesses stop selling or sharing (for cro...
CCPA - Effective January 1, 2026 - Requests to Opt-in After Opting-out of the Sale or Sharing of Personal Information or Limiting the U...
