Displaying 15 results for

The 2020 holiday season is coinciding with a nationwide surge of COVID-19 cases. With great concern that holiday travel to see loved ones may exacerbate community spread of the virus, many states are increasing public health measures before the winter holiday season. As of November 16, 2020, 13 states and D.C. had a quarantine requirement for out-of-state travelers. The U.S. territories also have instituted travel restrictions to limit the spread of COVID-19.

Several states and territories, as well as many local governments, are going beyond recommendations and requiring individuals to wear face coverings when they are in public settings and spaces (i.e. grocery stores, retail stores, restaurants, public and private transportation services, parks, etc.). Ongoing research and evidence suggests the relationship between mandatory face coverings and declines in daily COVID-19 growth rates is statistically significant.

Good news and bad news on tobacco use: smoking rates are down but e-cigarette use continuing rapid rise among youth. Read how states are combating the problem.

State Policy Trends in Cybersecurity and Public Health Preparedness Maggie Nilz Learn how states are including cybersecurity in their emergency preparedness work in this Health Policy Update. Cybersecurity is an increasingly important component of public health preparedness as state cybersecurity policy intersects with public health agency responsibilities. Public health agencies rely on interconnected digital systems and critical infrastructure for disease surveillance, laboratory reporting, emergency communications, and health data management, making cybersecurity critical to maintaining these functions. Beyond compromising sensitive data and potentially harming patients, cyber incidents can disrupt essential public health services, including emergency response operations. Health care data breaches have steadily increased over the last 15 years, highlighting growing risks for government and health systems. A recent report showed that more than 7,000 health care data breaches were reported to the Department of Health and Human Services since 2009, and reported HIPAA data breaches in 2023 were nearly double the number recorded in 2018. Meanwhile, preparedness capacity has lagged: as of 2022, only 13% of local health departments reported being prepared for cyber-related disruptions, and recent scans show cybersecurity is rarely included in emergency preparedness planning. In response at the federal level, HHS recently announced it is undoing a 2024 reorganization by returning department-wide technology responsibilities to the Office of the Chief Information Officer while refocusing the Office of the National Coordinator for Health Information Technology on improving nationwide health IT interoperability and data sharing. In recent years, state and territorial legislatures have begun to address these gaps by incorporating cybersecurity into preparedness, health care oversight, and statewide governance structures. These legislative trends signal a need to integrate cybersecurity into emergency operations plans, strengthen cross-sector coordination, and safeguard the continuity of public health services. Some of the most recent policies considered and enacted by legislatures treat cyber incidents as emergencies, expand reporting requirements, and strengthen cyber governance. Cyber Incidents Are Being Built into Emergency Preparedness Frameworks In response to these growing threats, jurisdictions have begun incorporating cyber response into emergency plans and strategies, reinforcing cybersecurity as essential to preparedness. These developments highlight growing awareness that cyber incidents can disrupt critical services, much like natural disasters. In 2025, New York enacted S 7672, which requires municipal entities and public authorities report cybersecurity incidents and demands for ransom to the state Division of Homeland Security and Emergency Services. In addition, it directs the Director of the Office of Information Services to establish cybersecurity training and protection standards for state systems as well as require cybersecurity training for state and local government employees. Virginia is currently considering HB 83, which would establish a volunteer Cyber Civilian Corps within the state IT agency to provide rapid assistance during cybersecurity incidents affecting municipalities, nonprofits, education, and critical infrastructure. Preparedness efforts also extend beyond legislation to executive action. In February 2026, Minnesota Governor Tim Walz authorized $1.2 million in state disaster assistance to support response efforts and restore critical systems in response to a cyber incident that disrupted digital services in Saint Paul on July 29, 2025. Additionally, the National Governors Association has included cybersecurity as a primary consideration for planning and preparedness in their latest edition of the Public Health Emergency Playbook. Health care and Public Health Critical Sectors Are Facing New Cyber Requirements Beyond emergency response frameworks, jurisdictions are also adopting cybersecurity reporting and planning requirements for health care and public health organizations. Companion bills in Tennessee (HB 511/SB 555) would require health care providers and facilities to notify their contracted health insurers of cybersecurity incidents. In Maine, LD 2103 would require hospitals to adopt cybersecurity plans to protect patient data and maintain operations, and must include cybersecurity training for employees and board members. New Jersey is looking to adopt and implement a more comprehensive cybersecurity plan across all sectors. This session, legislators have introduced at least two cyber security bills: A 3231 would require “sensitive businesses” (defined as those engaged in financial, essential infrastructure, or health care industries) to report cybersecurity incidents to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) when they are aware of their occurrence and would require NJCCIC to conduct a cybersecurity audit within 30 days of notification. A 3283 would require the same “sensitive businesses” to implement cybersecurity programs in accordance with standards adopted by NJCCIC and certify compliance annually. As states expand reporting and cybersecurity requirements, these obligations may intersect with public health reporting and continuity planning. States Are Strengthening Government Cyber Governance and Coordination In addition to sector-specific requirements, jurisdictions are also strengthening the governance structures responsible for coordinating cybersecurity, improving their ability to respond to large-scale incidents affecting public systems. Legislation enacted recently in Texas and California aim to improve coordination among state government by establishing a state agency centralizing cybersecurity incident prevention and response (Texas HB 150) and mandating the development of a cybersecurity playbook to strengthen information sharing (California AB 979). A 2024 bill enacted in Puerto Rico (PC 1530) requires commonwealth agencies to develop and implement a cybersecurity program, which must include a yearly risk assessment as well as vulnerability assessment. At least three jurisdictions are currently considering bills strengthening established cybersecurity programs, with two states recently passing legislation. Utah recently enacted a bill authorizing the Utah Cyber Center to conduct voluntary cybersecurity risk assessments for critical infrastructure and coordinate with government entities on infrastructure safety (HB 165). Utah also enacted legislation creating a specific funding stream for the Center to use for various activities, including implementing a statewide cybersecurity plan and conducting assessments for governmental entities (SB 123). Kansas enacted HB 2574, which would require chief information security officers for the executive, legislative, and judicial branches to adopt cybersecurity programs based on a nationally recognized standard for governmental entities. Finally, Florida recently passed SB 7024, which would expand the state’s public record exemption to include risk assessments, information related to cybersecurity breaches, and information related to data protection, ensuring the confidentiality of sensitive cybersecurity information held by state agencies; the bill is with the governor for final consideration. Key Takeaways for Preparedness Leaders Cybersecurity is critical for preparedness across multiple policy areas, and requires new planning, coordination, and oversight responsibilities. By including cyber incidents into disaster frameworks, standards for health care organizations, and governance, preparedness leaders may find themselves more directly engaged in integrating cybersecurity into emergency operations, exercises, and cross-sector partnerships. For state and territorial health agencies beginning to incorporate cybersecurity into their preparedness plans, agencies such as the Cybersecurity and Infrastructure Security Agency provide jurisdictional support and resources to guide this work. article yes

ASTHO Legislative Prospectus | Prevention 2025 state legislative action on infectious disease control and prevention.

Learn how state and territorial legislatures can bolster or restrict public health legal authority, with examples from early COVID-19 as well as 2024.

In an effort to help meet demand, some states and territories have joined interjurisdictional licensing compacts that allow a mental health care provider licensed in one state to provide care in another state—without needing to gain licensure in multiple states. These agreements also offer guidance on patient privacy for services rendered remotely or from out-of-state.

Under the Tenth Amendment, states have the power to protect the health and welfare of their populations, including the authority to implement isolation and quarantine orders to limit the spread of disease. This post is an examination of state public health authority for isolation and quarantine.

State and territorial health agencies continue to be challenged by the opioid epidemic, which has been exacerbated by the COVID-19 pandemic. Addressing the opioid crisis requires a robust public health response, which could be helped by resources from pending and future opioid settlement funds.

Recap the state legislative sessions in 2025 thus far, spanning maternal health, infectious disease, and other important public health issues.

2026 State Legislative Session Update 2026 State Legislative Session Update Learn about state legislation from FY26 focused on hot public health topics in this Health Policy Update. ASTHO’s 2026 Legislative Prospectus Series announced the top five public health state policy issues to watch this year. With at least 30 states scheduled to conclude their legislative sessions by the end of May, state legislatures focused on many of these public health topics. Expanding Access to Care As expected, a number of states considered legislation to expand access to care, including policies that promote community-based services and rural health care access. Doula birthing support services continue to be a topic for state legislatures with at least a dozen states considering legislation to expand coverage or access. Oregon enacted SB 1568, expanding coverage for birth and postpartum doulas and lactation counselors. Virginia enacted two bills that support access to doulas: HB 328 requires the Bureau of Insurance to select a new essential health benefits benchmark plan that includes doula care coverage starting in 2029, while HB 838 expands Medicaid coverage to include incentive payments for doulas to provide linkage to care visits in the postpartum period. For other licensed health care professionals, interstate compacts allow health care professionals licensed in one member state to practice in another without additional credentials. This year, legislatures have considered more than 100 health care professional compact bills so far, with at least six states enacting legislation: Arizona (HB 2190), North Dakota (HB 1622), and South Dakota (HB 1146) adopted the Physician Assistant Licensure Compact. New Mexico adopted the Interstate Medical Licensure Compact (SB 1) and the Social Work Licensure Compact (HB 50). Mississippi (SB 2543) adopted the Dentist and Dental Hygienist Compact. Washington (HB 2088) adopted the Dietitian Licensure Compact. Finally, at least two states enacted legislation to expand telehealth. Virginia HB 1284 specifies that its Medicaid provider-to-provider consultation provision includes services provided via telehealth, and Kentucky HB 424 eases the requirements for social worker telehealth practice. Behavioral Health Legislatures are also continuing to explore policies that address mental health and substance misuse. This includes legislation that supports people across the care continuum, explores the use of psychoactive substances in mental health treatment, and regulates emerging substances. At least seven states have enacted legislation to establish or enhance the continuity of care for people in a behavioral health crisis. This includes Maine LD 1216, which requires the Department of Health and Human Services to establish crisis intervention support services in all counties. Virginia enacted HB 453, which specifically allows amendments to the state’s Marcus Alert plan supporting the state’s comprehensive crisis system and requires state agencies and local partners to align their policies accordingly. States also continue to promote the availability of opioid reversal drugs through legislative action. Virginia SB 257/HB795 requires certain health insurance plans to include at least one opioid antagonist with limited cost-sharing on their drug formularies. Kansas HB 2534 requires schools to stock naloxone and establish polices to support its administration, and Utah SB 87 clarified its immunity provisions for administering opioid antagonists and will allow expired — but still effective — opioid antagonists to be dispensed and administered in certain situations. Another trend this legislative session is the legalization and regulation of use, medical study, and reclassification of certain psychedelic drugs for therapeutic purposes. Several states considered legislation to allow psilocybin for therapeutic purposes, including Oregon HB 4040, which already allows psilocybin service centers and expanded its licensing criteria for psilocybin service facilitators. At least 23 states considered, and five states (Mississippi SB 2056, South Dakota HB 1099, Utah SB 83, Virginia SB 379, and West Virginia SB 906) enacted legislation that would automatically reschedule psilocybin or certain formulations, pending federal approval and/or rescheduling. Finally, at least 10 states considered bills to support access or research into ibogaine, which is being studied in relation to PTSD and substance use disorder. States include Washington (SB 5204), Oregon (HB 4110), Tennessee (SB 2149/HB 2075), Louisiana (SB 43), Oklahoma (HB 3834), and Georgia (HB 1296), with Mississippi enacting HB 314 to allow the state health department to participate in a consortium supporting clinical trials for ibogaine drug development. A number of states are also taking action to address kratom, a plant-based substance with the potential for serious side effects, including substance use disorder and withdrawal symptoms. As of January 2026, 31 jurisdictions regulate kratom, with at least five states enacting legislation this year. New York (A 9472/S 8814), Virginia (HB 360), and West Virginia (SB 985) established or enhanced prohibitions on selling kratom to people under 21, while Nebraska (LB 901) enacted an excise tax on kratom products. Utah enacted two bills (HB 385 and SB 45) that regulate processors and retailers and New York mandated warning labels on certain kratom products (A 9443/S 8780). Healthy Food and Chronic Disease States continue to prioritize chronic disease by advancing policies recognizing the importance of prevention and how food impacts health. In 2026, a number of states considered legislation to address food insecurity, improve school nutrition, and promote chronic disease screening and prevention. At least 10 states considered legislation to limit ultra-processed foods or promote access to healthy foods, with Nebraska LB 940 prohibiting public schools from offering foods that contain certain color additives and Tennessee SB 2423/HB 1853 taking a similar approach but for any artificial food dye. States are also exploring ways to accommodate student dietary preferences. Minnesota (SF 2970), New Jersey (S 1676), New York (A 1834), and Washington (S 5878) introduced legislation that would mandate plant-based options in school cafeterias. Illinois enacted HB 1607, creating a health department task force to review state efforts to eliminate food deserts and requiring a report with recommendations by January 2028. Finally, state legislatures are taking action to support access to early detection and chronic disease management through insurance regulation. Mississippi enacted HB 565 to require Medicaid and other health plans to cover biomarker testing for the diagnosis, treatment, management, or monitoring of patients when supported by medical evidence. Additionally, Oregon enacted SB 1527, which limits out of pocket costs for medically necessary cervical cancer screenings and follow-up examinations. Finally, Alabama (SB 19) will prohibit certain insurance plans from imposing cost-sharing for prostate cancer screening of all men over 50 and younger men at high risk. Infectious Disease Prevention With recent changes to the membership and recommendations of the Advisory Committee on Immunization Practices (ACIP), a number of state legislatures have considered changes to vaccine policy in 2026. Several states enacted legislation to modify the role of ACIP, including Colorado (SB 26-032), Connecticut (HB 5044), Maine (LD 2146), Maryland (HB 637), New Mexico (HB 156), Oregon (SB 1598), Vermont (H 545), and Washington (HB 2242). Many of these bills address other components of vaccine policy, including: Vaccine Schedule Recommendations: Colorado, Connecticut, Maryland, New Mexico, Vermont, and Washington substitute or add state health agencies and/or organizations like the American Academy of Pediatrics, American College of Obstetricians and Gynecologists, American Academy of Family Physicians, and American College of Physicians as sources for vaccine recommendations. Insurance Coverage: Connecticut, Maryland, New Mexico, Oregon, Vermont, and Washington require health insurance plans to cover vaccines recommended by health agencies or other organizations, rather than ACIP alone. Pharmacist Scope of Practice: Maryland and Vermont substitute or remove ACIP recommendations as an authority for pharmacists to administer vaccines, and Colorado allows pharmacists to prescribe vaccines independently. Funding: Colorado, Maine, and Vermont expand vaccine purchasing programs to include vaccines recommended by bodies other than ACIP. Liability Protections: Colorado, Maine, and Vermont include liability protections for certain providers administering vaccines according to state or medical organization recommendations. Public Health Funding Legislatures in thirty-one states, the District of Columbia, and three U.S. territories will enact budgets for the 2027 fiscal year, while legislatures in three more states will enact biennial budgets for the 2027 and 2028 fiscal years. With reductions in federal funding, states continue to find ways to leverage state funds to invest in public health and public health infrastructure while adhering to balanced budget requirements. Eleven states have enacted FY 2027 budgets and three states enacted biennial budgets for FY 2027-FY 2028, with several states increasing public health funding, including Kansas (HB 2513), New Mexico (HB 2), and Wyoming (SF 0001). Additionally, three states passed FY 2027 supplemental budgets featuring public health provisions: Maine LD 2212 appropriates funding to support access to affordable prescription drugs in rural and underserved areas, Washington SB 6003 increases funding for the state’s Drinking Water State Revolving Fund, and Nebraska LB 1071 shifts funds to children’s health insurance, community-based aging services, and mental health operations. States have also

Through the lens of the Public Health Accreditation Board's standards and measures, this report explores innovative programs and policies implemented by health departments in an effort to adopt system-wide approaches to achieving health equity.

As the U.S. continues to undertake the largest vaccination campaign in almost a century, it has required government at all levels to surge workforce capacity. The federal government, states, territories, and local jurisdictions are acting to meet the immediate demand for vaccination as well as expand the long-term vaccination workforce. Looking ahead, expansion of the vaccination workforce long-term will help support potential COVID-19 booster shots and expand vaccine access broadly.

Two key considerations for those working with state and territorial legislators considering vaccine legislation: work with trusted messengers and craft informative and compelling testimony.

A pressing public health issue before the COVID-19 pandemic hit, the need for public health interventions to reduce tobacco use is heightened with a strong association between tobacco use, in all forms, with severe COVID-19 outcomes. Additionally, tobacco use remains the leading cause of preventable death in the U.S., claiming approximately 480,000 deaths each year. Evidence-based policies to reduce tobacco use like raising the age of sale to 21, increasing tobacco pricing, and prohibiting the sale of flavored tobacco products are common public health strategies enacted through state legislation. As anticipated in ASTHO’s 2021 Legislative Prospectus on E-Cigarettes, states are considering many of these evidenced-based tobacco reduction strategies during the 2021 legislative sessions.