New York's Attorney General has released plain-language guidance explaining how the state's Shield Law applies when a person or organization receives a subpoena, investigative demand or other request for information about reproductive or gender-affirming care that is legal in New York. The document is directed to patients, families, health professionals, insurers, attorneys, businesses and others who may hold covered information.
The law protects people who receive, provide or assist with covered care. That group can include patients, relatives, clinicians, clinic staff, volunteers, insurers and lawyers. Patients managing their own care are protected wherever they are, while professionals and people assisting them generally receive the law's protection when they are physically in New York. Telehealth provided by a New York physician is included within the framework described by the guidance.
New York officials, law-enforcement agencies and courts may not assist an out-of-state effort intended to punish legally protected care. The restrictions can apply to subpoenas, warrants, extradition requests, evidence and professional discipline. The law does not convert conduct that violates New York law into protected activity, and it contains exceptions for ordinary treatment, billing, certain audits and information needed for a legal defense.
A recipient of a potentially covered request cannot simply turn over the information. The guidance directs the recipient to determine whether protected care is involved, obtain a sworn statement that the information will not be used to punish that care, notify the Attorney General and make a reasonable effort to notify the affected person. The usual waiting period is 30 calendar days after notification.
Those steps create time for the state and the person whose information is sought to review the demand. Someone who follows the required process generally cannot be punished for the resulting delay and may challenge the request in court. The guidance includes examples and a state portal for submitting notice and documents. A valid court order or a statutory exception can change what must happen in a particular case.
The consequences for ignoring the process can be substantial. The Attorney General says an improper disclosure can bring a $10,000 penalty, while a false sworn statement intended to evade the law can bring a $15,000 penalty. The office may also bring an enforcement action, and people targeted for receiving or providing protected care can have a private right to sue in specified circumstances.
The guidance should not be treated as individualized legal advice. A health provider, employer or technology company may hold records in several systems and face overlapping duties involving privacy, retention and litigation holds. The safest operational approach is to identify a responsible legal contact before a demand arrives, train staff not to respond informally and preserve the original request and delivery records.
The practical change is procedural clarity. New Yorkers now have a published checklist for recognizing a covered demand, pausing disclosure, making required notices and seeking review. The policy dispute behind shield laws will continue across states, but a recipient in New York must follow the law that applies here rather than assume that an out-of-state document can be answered in the ordinary course.
Organizations handling health-related information should translate that checklist into an internal workflow: route legal demands to trained staff, flag terms that may indicate covered care, restrict access while review is pending and record every required notice. That preparation does not decide whether a request is valid. It reduces the risk that a front-line employee discloses sensitive information before the law's review and waiting procedures can operate.
Primary sources: New York Attorney General Shield Law guidance announcement. Reviewed November 10, 2026. Development: Guidance released November 9, 2026.