Hemp’s Hazy Legal Status Challenges Public Health Efforts
Learn about state regulation of hemp, following federal deregulation and public health challenges including adverse effects of hemp products.
Learn about state regulation of hemp, following federal deregulation and public health challenges including adverse effects of hemp products.
Learn how states have increased and/or allocated funding to continue supporting core public health services.
States Pursue Policy Options to Support Access to Over-the-Counter Contraception State Policy to Support Over-the-Counter Contraception Access Christina Severin Learn about state policy options that can help to support over-the-counter contraception access including levers within Medicaid programs. Effective contraceptive care improves maternal health outcomes by helping individuals plan if and when they become pregnant. Additionally, some contraceptive methods may reduce the risk of certain cancers and protect against sexually transmitted infections. While the most effective methods generally require a visit to a health care provider, over-the-counter (OTC) options may address certain barriers to accessing contraception (e.g., taking time off work for a medical appointment and lack of health insurance or access to health care providers/settings). The New Age of Nonprescription Oral Contraceptives A significant change in the marketplace of OTC options occurred in 2023 when FDA approved the first daily non-prescription oral contraceptive. This progestin-only pill —known as Opill — is considered both safe and highly effective at preventing pregnancy when taken correctly. Opill reached stores in early 2024 and has a suggested retail price of about $20 per month or $50 for a three-month supply. While OTC oral contraceptives like Opill may improve access among individuals not currently using contraception or those using a less effective method, high out-of-pocket costs can be a barrier. One way to limit out-of-pocket costs is to require private health insurance coverage of contraception without cost-sharing. ACA requires most private health insurance plans to do this, but it does not extend to all health insurances or contraceptives. For OTC contraceptives, the landscape is even more complex: While plans are encouraged to cover OTC emergency contraception at no cost and without a prescription, it is not required. HHS and the Departments of Labor and Treasury issued a proposed rule in 2023 that would have required broader coverage of OTC contraception without a prescription or cost-sharing, but the rule was later withdrawn. Without a federal mandate, states can pursue coverage requirements through the health insurance products they regulate. Jurisdictions can also support OTC contraception access in their Medicaid programs. While Medicaid requires coverage of family planning supplies without cost-sharing, jurisdictions have some flexibility in how they design this benefit, and the scope of coverage depends on jurisdiction and state plan-specific factors. Jurisdictions also have flexibility in determining how they provide prescription drug coverage for contraceptive medications and what OTC products are covered. State Legislative Action Legislation is one way for states to promote access to OTC contraceptives, including hormonal contraceptives, through state-regulated plans and provider scope of practice considerations. Since 2024, several states have enacted laws requiring coverage of OTC hormonal contraception, including Delaware (SB 232), which directs insurance carriers to cover FDA-approved OTC contraception with or without a prescription, and Maine (LD 163), which requires coverage of nonprescription oral hormonal contraception. At least two states have clarified the role of pharmacists in supporting access to OTC contraceptives. Massachusetts (HB 4800) allows pharmacist dispensing of OTC oral contraception per a standing order and provides liability protections, while California (AB 50) allows pharmacists to furnish self-administered OTC hormonal contraception without complying with the state’s protocols for prescription-only oral contraceptives. States have also enacted laws to explore or support broader access to OTC contraception, including at least three bills enacted in Maryland since 2024: HB 367/SB 527 requires community colleges to develop an OTC contraception access plan and allows the health department to serve as a resource, including for consultation on vending machine access. HB 1171/SB 944 allows local health department registered nurses to dispense OTC contraception. SB 674/HB 939 creates a collaborative tasked with studying and making recommendations on OTC contraceptive access, with a final report due to the governor and legislature by Jan. 1, 2027. Other Policy Levers Legislation isn’t the only policy lever available to jurisdictions looking to support OTC contraception access. A number of states have taken executive actions to improve access, including (but not exclusively) through Medicaid. While jurisdictions already have the flexibility to support OTC contraceptive access in their Medicaid programs, Medicaid rules require a prescription even for OTC products, which may present a barrier for some individuals. One potential solution is to use standing orders, which allow individuals direct access to OTC products at a pharmacy, without having to visit a separate provider for a prescription first. To ease access to OTC hormonal contraception specifically, several states have recently utilized standing orders that facilitate Medicaid coverage, including Wisconsin, Massachusetts, and New Mexico. Additionally, in 2024, North Carolina announced that it was removing barriers to OTC oral contraception, and would cover condoms and spermicide as OTC products. Outside of Medicaid, several other states have taken action to support access to OTC hormonal contraception: In 2024, the Governor of Arizona issued an executive order directing the Department of Administration to designate Opill and OTC hormonal contraception as a no-cost essential health benefit for state employees, among other actions to expand coverage and access. Also in 2024, Pennsylvania issued guidance to health insurers encouraging coverage of OTC hormonal contraception and highlighting two insurers intending to comply with the guidance. Finally, Michigan’s health agency, in partnership with the Governor’s office, implemented a Take Control of Your Birth Control campaign. This initiative distributed OTC contraception at hundreds of community sites across the state, with a stated goal of connecting individuals to insurance coverage, including Medicaid. While the campaign recently ended, the state distributed more than 400,000 OTC contraceptive resources (e.g., condoms, emergency contraception, and oral contraceptives) and saw an increased number of Medicaid applications. Jurisdictions can play a significant role in connecting public health and health care industry leadership, providers, and other experts — promoting awareness, increasing utilization, and encouraging connection to existing resources. Related Content - Blog - State Policy to Support OTC Contraception Access article yes
Legislative Snapshot: Suicide Prevention Infrastructure and AI Chatbots Legislative Snapshot: Suicide Prevention Infrastructure and AI Chatbots JoAnne Deehr Suicides continue to be a critical public health issue — learn how states are leveraging policy to improve suicide prevention. Suicide remains a persistent public health challenge, affecting people of all ages, racial and ethnic groups, geographic regions, and income levels in the United States. Despite ongoing prevention efforts, more than 49,300 Americans died by suicide in 2023. National suicide rates steadily rose from 2003 until 2018 and have remained high since then, reflecting an enduring and widespread impact. While all communities are affected by suicide, certain demographics face higher risks. Disproportionately higher rates of suicide are seen among elderly Americans, Veterans, individuals with lower income, less education, and those living in rural areas. People in certain industries, such as mining, construction, and public safety, are also at elevated risk. At the same time, emerging technologies like chatbots powered by artificial intelligence (AI) have raised new considerations related to safety, oversight, and appropriate use in mental health settings, underscoring the need for thoughtful state approaches to suicide prevention. Policymakers are responding to these challenges in multiple ways, including establishing state suicide prevention infrastructure and regulating AI chatbot use in mental health. Suicide Prevention Infrastructure Legislation Suicide prevention efforts are most effective when states and territories have dedicated infrastructure — such as suicide prevention offices, coordinators, commissions, and fatality review processes — to support coordination, surveillance, and implementation of evidence-based strategies. These structures enable state and territorial health agencies to identify populations and communities at increased risk, align partners across public health, health care, and public safety, and pursue sustainable funding for suicide prevention and crisis system improvements. ASTHO’s Suicide Prevention Offices and Committees Legal Map highlights the varied policy approaches states have taken to establish this infrastructure and identifies which states had statutory suicide prevention structures in place as of January 1, 2025. During the 2025 legislative session, states considered at least 30 bills related to establishing suicide prevention offices, coordinators, advisory bodies, and suicide fatality reviews. Five of these bills were enacted, including Delaware’s HB 54 which establishes the state’s Office of Suicide Prevention. Delaware also enacted HB 87, expanding membership in the state’s Suicide Prevention Coalition to include someone who has experienced suicidal ideation or survived a suicide attempt and someone who has lost a loved one to suicide. Conversely, Oklahoma enacted SB 676, repealing the section of the state’s Suicide Prevention Act that established the Oklahoma Suicide Prevention Council, which was slated to sunset in 2020. The council was originally tasked with identifying issues and promoting strategies to prevent suicide, and providing technical assistance on best practices for identifying people at risk of suicide. The Department of Mental Health and Substance Abuse Services still serves as the leading agency for implementing the remainder of tasks outlined in the Act. Illinois and Texas enacted legislation establishing advisory bodies focused on suicide prevention among first responders. In Texas, HB 1593 creates a committee to study suicide prevention and peer support programs within fire departments and requires a report with recommendations by September 2026. In Illinois, HB 2551 reconstitutes the First Responders Suicide Prevention Task Force, and increases membership in the task force to include a member from an organization that provides mental health training and support to first responders and two members who represent organizations that advocate on behalf of public safety telecommunicators, such as 911 operators and dispatchers. The bill also charges the task force with developing a final report by December 2026. Both bodies are scheduled to sunset in January 2027. Currently, Wisconsin has several types of fatality review teams operating through voluntary efforts with no law formally establishing or governing these teams. Wisconsin is considering SB 192, which would formally establish processes for reviewing fatalities, including deaths by suicide. It would also direct the Department of Health Services to establish a fatality review program comprised of established local teams and authorize the department to establish state fatality review teams. AI Chatbots While states continue to strengthen suicide prevention infrastructure, policymakers are beginning to turn their attention to emerging mental health considerations related to AI. Since emerging in the 1950s, AI has evolved from rule-based systems to today's machine learning and natural language processing applications, powering everything from data analysis to interactive chatbots. Recent AI advances enable chatbots to simulate human conversation so convincingly that users may forget they are interacting with a machine. However, these systems lack genuine empathy and cannot substitute for professional mental health treatment. Their tendency to be excessively agreeable creates particular dangers for people experiencing suicidal ideation, leading some states to explore regulations governing AI chatbot use in mental health and suicide prevention contexts. At least 19 states considered legislation regulating the use of AI for mental health related reasons to promote user safety. At least five bills were enacted, including California SB 243, which requires chatbot platform operators to disclose that users are interacting with AI if confusion could occur, develop protocols to prevent and respond to suicidal ideation or self-harm, and report annually on safety measures to the state Office of Suicide Prevention. The California legislature also passed AB 1064, which the Governor subsequently vetoed due to concerns that its broad restrictions on AI companion chatbots for minors could limit access to potentially beneficial tools. Illinois and Nevada passed legislation that largely prohibits AI from providing behavioral health services. Illinois HB 1806 restricts the use of AI for therapy or psychotherapy unless delivered by a licensed professional who is required to inform the patient, or their legal representative, in writing and receive consent. The law also prohibits licensed professionals from allowing AI to make independent therapeutic decisions or interact directly with clients and allows the use of AI only for administrative or supplemental tasks under professional oversight. Nevada AB 406 similarly prohibits AI systems from providing or representing themselves as offering professional mental or behavioral health care, prohibits AI from performing the functions of a school counselor, psychologist, or social worker in public schools, and allows licensed professionals to use AI only for administrative or supportive purposes, with oversight to ensure accuracy and safety. New York and Utah passed laws requiring mental health chatbots to clearly disclose that they are not human. As part of their annual budget, New York S 3008 mandates that AI companion systems capable of simulating human-like interactions detect suicidal ideation or self-harm, provide crisis referrals, and regularly disclose that users are interacting with AI rather than a person. Utah HB 452 requires AI-driven mental health chatbots to provide clear disclosures and limits advertising and data practices. At the federal level, on December 11, 2025, the White House issued an executive order seeking to establish a national policy framework for artificial intelligence and create a “minimally burdensome” federal approach. The order also directs the Department of Justice to form an AI Litigation Task Force to identify and challenge state AI laws deemed in conflict with this federal policy, and the Department of Commerce to limit eligibility for certain federal funds for states that take a non-preferred approach. The scope and criteria of these federal actions, including their impact on state laws aimed at suicide prevention, have not been clearly defined. Advancing suicide prevention will require states and territories to take comprehensive approaches that address both systemic gaps within state infrastructure and emerging technologies. ASTHO will continue to monitor these policy developments and provide relevant updates. Reviewed by - Baker-White, Maffey article yes
State and federal efforts to bolster health care access for underserved rural communities.
Responsible for planting, growing, harvesting, processing, and preparing the food we eat, agricultural workers are essential workers during the COVID-19 response to keep the U.S. food supply chain operating efficiently. But farmworkers are particularly vulnerable to COVID-19 due to lack of physical distancing, lack of access to health insurance and sick leave, and poor access to clean water for handwashing throughout the work day.
The movement to address racism through policy change in the U.S. is receiving significant political support at every level of government. Government institutions are acknowledging the systemic oppression of people of color that persists in the United States and elevating racism as an urgent public health emergency comparable to other public health crises.
An increasing body of research finds racism can have a significant impact across one’s lifespan. Research shows that persistent exposure to racial discrimination may result in premature aging, poor health outcomes, and increased prevalence of certain chronic diseases. At every level of government, policymakers are seeking to acknowledge the systemic oppression of people of color that persists and to elevate racism as an urgent public health crisis comparable to other public health emergencies.
This report identifies and breaks down seven core value areas that emerge from taking a health in all policies approach to policymaking and programming.
Good news and bad news on tobacco use: smoking rates are down but e-cigarette use continuing rapid rise among youth. Read how states are combating the problem.
State Policy Trends in Cybersecurity and Public Health Preparedness Maggie Nilz Learn how states are including cybersecurity in their emergency preparedness work in this Health Policy Update. Cybersecurity is an increasingly important component of public health preparedness as state cybersecurity policy intersects with public health agency responsibilities. Public health agencies rely on interconnected digital systems and critical infrastructure for disease surveillance, laboratory reporting, emergency communications, and health data management, making cybersecurity critical to maintaining these functions. Beyond compromising sensitive data and potentially harming patients, cyber incidents can disrupt essential public health services, including emergency response operations. Health care data breaches have steadily increased over the last 15 years, highlighting growing risks for government and health systems. A recent report showed that more than 7,000 health care data breaches were reported to the Department of Health and Human Services since 2009, and reported HIPAA data breaches in 2023 were nearly double the number recorded in 2018. Meanwhile, preparedness capacity has lagged: as of 2022, only 13% of local health departments reported being prepared for cyber-related disruptions, and recent scans show cybersecurity is rarely included in emergency preparedness planning. In response at the federal level, HHS recently announced it is undoing a 2024 reorganization by returning department-wide technology responsibilities to the Office of the Chief Information Officer while refocusing the Office of the National Coordinator for Health Information Technology on improving nationwide health IT interoperability and data sharing. In recent years, state and territorial legislatures have begun to address these gaps by incorporating cybersecurity into preparedness, health care oversight, and statewide governance structures. These legislative trends signal a need to integrate cybersecurity into emergency operations plans, strengthen cross-sector coordination, and safeguard the continuity of public health services. Some of the most recent policies considered and enacted by legislatures treat cyber incidents as emergencies, expand reporting requirements, and strengthen cyber governance. Cyber Incidents Are Being Built into Emergency Preparedness Frameworks In response to these growing threats, jurisdictions have begun incorporating cyber response into emergency plans and strategies, reinforcing cybersecurity as essential to preparedness. These developments highlight growing awareness that cyber incidents can disrupt critical services, much like natural disasters. In 2025, New York enacted S 7672, which requires municipal entities and public authorities report cybersecurity incidents and demands for ransom to the state Division of Homeland Security and Emergency Services. In addition, it directs the Director of the Office of Information Services to establish cybersecurity training and protection standards for state systems as well as require cybersecurity training for state and local government employees. Virginia is currently considering HB 83, which would establish a volunteer Cyber Civilian Corps within the state IT agency to provide rapid assistance during cybersecurity incidents affecting municipalities, nonprofits, education, and critical infrastructure. Preparedness efforts also extend beyond legislation to executive action. In February 2026, Minnesota Governor Tim Walz authorized $1.2 million in state disaster assistance to support response efforts and restore critical systems in response to a cyber incident that disrupted digital services in Saint Paul on July 29, 2025. Additionally, the National Governors Association has included cybersecurity as a primary consideration for planning and preparedness in their latest edition of the Public Health Emergency Playbook. Health care and Public Health Critical Sectors Are Facing New Cyber Requirements Beyond emergency response frameworks, jurisdictions are also adopting cybersecurity reporting and planning requirements for health care and public health organizations. Companion bills in Tennessee (HB 511/SB 555) would require health care providers and facilities to notify their contracted health insurers of cybersecurity incidents. In Maine, LD 2103 would require hospitals to adopt cybersecurity plans to protect patient data and maintain operations, and must include cybersecurity training for employees and board members. New Jersey is looking to adopt and implement a more comprehensive cybersecurity plan across all sectors. This session, legislators have introduced at least two cyber security bills: A 3231 would require “sensitive businesses” (defined as those engaged in financial, essential infrastructure, or health care industries) to report cybersecurity incidents to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) when they are aware of their occurrence and would require NJCCIC to conduct a cybersecurity audit within 30 days of notification. A 3283 would require the same “sensitive businesses” to implement cybersecurity programs in accordance with standards adopted by NJCCIC and certify compliance annually. As states expand reporting and cybersecurity requirements, these obligations may intersect with public health reporting and continuity planning. States Are Strengthening Government Cyber Governance and Coordination In addition to sector-specific requirements, jurisdictions are also strengthening the governance structures responsible for coordinating cybersecurity, improving their ability to respond to large-scale incidents affecting public systems. Legislation enacted recently in Texas and California aim to improve coordination among state government by establishing a state agency centralizing cybersecurity incident prevention and response (Texas HB 150) and mandating the development of a cybersecurity playbook to strengthen information sharing (California AB 979). A 2024 bill enacted in Puerto Rico (PC 1530) requires commonwealth agencies to develop and implement a cybersecurity program, which must include a yearly risk assessment as well as vulnerability assessment. At least three jurisdictions are currently considering bills strengthening established cybersecurity programs, with two states recently passing legislation. Utah recently enacted a bill authorizing the Utah Cyber Center to conduct voluntary cybersecurity risk assessments for critical infrastructure and coordinate with government entities on infrastructure safety (HB 165). Utah also enacted legislation creating a specific funding stream for the Center to use for various activities, including implementing a statewide cybersecurity plan and conducting assessments for governmental entities (SB 123). Kansas enacted HB 2574, which would require chief information security officers for the executive, legislative, and judicial branches to adopt cybersecurity programs based on a nationally recognized standard for governmental entities. Finally, Florida recently passed SB 7024, which would expand the state’s public record exemption to include risk assessments, information related to cybersecurity breaches, and information related to data protection, ensuring the confidentiality of sensitive cybersecurity information held by state agencies; the bill is with the governor for final consideration. Key Takeaways for Preparedness Leaders Cybersecurity is critical for preparedness across multiple policy areas, and requires new planning, coordination, and oversight responsibilities. By including cyber incidents into disaster frameworks, standards for health care organizations, and governance, preparedness leaders may find themselves more directly engaged in integrating cybersecurity into emergency operations, exercises, and cross-sector partnerships. For state and territorial health agencies beginning to incorporate cybersecurity into their preparedness plans, agencies such as the Cybersecurity and Infrastructure Security Agency provide jurisdictional support and resources to guide this work. article yes
In-depth analysis on state health policy surrounding immunization. This is part of ASTHO's annual legislative prospectus series.
A mid-session legislative update on five of ASTHO's top 10 public health state policy issues to watch in 2023: data privacy and modernization, reproductive health, health equity, strengthening public health agencies, and immunization.
State and federal actions to expand the doula workforce and improve maternal health.
Three ways policymakers are addressing access to care are through telehealth, safety net and emergency services, and adjusted reimbursement rates to Medicaid-enrolled providers.
To address the youth tobacco epidemic, jurisdictions filed lawsuits against JUUL to end their marketing practices aimed at youth and to obtain compensation from the financial toll experienced by communities.
There are a number of court cases playing out across the country that could affect the options state and territorial health officials have to limit the spread of disease and promote health and well-being.
Tobacco control has been a public health success in states across the nation, but there is still work to be done, especially surrounding the popularity of menthol and other types of flavored tobacco.
While communities transition from emergency response to long-term monitoring and recovery, the federal government and states are taking legislative action to improve emergency preparedness capabilities.
Supporting policies that reduce HIV stigma and promote health equity is an important public health issue.