Displaying 1-20 of 37 results for

ASTHO Legislative Prospectus | Prevention 2025 state legislative action on infectious disease control and prevention.

In-depth analysis on state health policy surrounding immunization. This is part of ASTHO's annual legislative prospectus series.

This report identifies and breaks down seven core value areas that emerge from taking a health in all policies approach to policymaking and programming.

Good news and bad news on tobacco use: smoking rates are down but e-cigarette use continuing rapid rise among youth. Read how states are combating the problem.

States Reassessing Vaccine Policy and Public Health Powers Shalini Nair, Andy Baker-White Review of state policies to weaken vaccine requirements and reduce public health powers. Immunization is a key pillar of public health, crucial for protecting communities and preventing infectious diseases from spreading. State and territorial health officials and their departments play critical roles in setting and implementing immunization requirements, managing disease surveillance and outbreak response, and ensuring access to vaccines. In recent years, however, the immunization landscape has evolved as legislative changes alter public health authority and access to vaccines. As these challenges persist, public health officials must be informed and prepared to navigate the dynamic policy environment to ensure immunization programs’ continued effectiveness at protecting public health. The True Cost of Vaccine Skepticism and Misinformation In the years since the pandemic, rates of routine vaccinations among U.S. children have steadily declined; there has simultaneously been an increase in non-medical exemptions. While reasoning behind personal decisions about vaccination are not always clear, increasing prominence of vaccine-related myths is a significant contributor to this phenomenon. Perhaps the most glaring consequence of this decrease is best illustrated by the 2025 measles outbreak and the first measles-associated deaths in more than a decade. Previously considered to have been eliminated, measles is now under threat of resurgence as vaccine rates fall below the thresholds to uphold herd immunity. Health officials are also seeing declines in coverage for several other vaccine preventable diseases like pertussis, mumps, hepatitis, and even polio. Legislation Restricts Innovation and Sows Doubt About Vaccine Components The use of mRNA technology expanded in 2020 following its breakthrough success in COVID-19 vaccines. These mRNA vaccines prevented more than 120 million additional COVID-19 infections and 3.2 million additional deaths. Researchers are currently assessing mRNA technology to address pandemic influenza, HIV, Zika, and even cancer. During 2025 sessions, at least seven states introduced legislation to ban or limit using mRNA vaccines. Iowa’s SF 360 sought to prohibit any “gene-based vaccines” (i.e., those developed using mRNA or DNA technology); the bill was based on a widely debunked myth that mRNA vaccines can interact with and alter human DNA (they can’t). New York’s A 4798 would prevent administering COVID-19 mRNA vaccines until the department of health conducts a risk-benefit analysis. Several states have introduced legislation to prohibit selling — or require labeling foods that contain — vaccine or vaccine material. This bill is based on another common internet rumor that mRNA vaccines are being introduced into the food supply via livestock and produce (they aren’t). Nonetheless, Utah enacted a bill (HB 84) requiring that food intended for human consumption that contains a vaccine or vaccine material be designated as a drug. Similar bills were introduced in Florida (HB 525), Alabama (HB 316), and Tennessee (SB 616, HB 1100). Vaccine Authority’s Shifting Landscape While the federal government plays an important role in putting forth policy recommendations, the ultimate power to impose or revoke vaccine requirements and determine exemptions outside of health emergencies rests with states. In many jurisdictions, state health agency expertise determines the vaccines required for school enrollment. These decisions, while ultimately at the feet of state health officials, rely heavily on input from experienced, knowledgeable, and skilled agency staff. Recent legislative actions in several states seek to shift authority for determining school-based immunization requirements solely to the legislature. Idaho’s new law (H 290) removes the state board of health’s authority to determine which immunizations are required for daycare and school enrollment, as well as the manner and frequency of their administration. The bill also repeals a former law establishing the Idaho Childhood Immunization Policy Commission, created in 2010 to issue recommendations to the legislature and board of health. A similar effort in Maine (LD 727) would remove health department authority to determine school vaccine requirements as part of a larger repeal effort responding to the 2019 law disallowing vaccine exemptions based on religious or philosophical grounds. In New Hampshire, existing statutes define required immunizations for school attendance and allow the state health official to add to this list via the rulemaking process. Recently, lawmakers introduced a bill (HB 357) that would remove this add-on ability. If passed, existing commissioner-led requirements for vaccines such as varicella, hepatitis B, and Hib would expire in June 2026 and no future amendments could occur under this authority. Several other bills introduced in Texas (HB 468, HB 3304, SB 94, SB 117, HB 3852), West Virginia (SB 108, HB 2203), and North Carolina (HB 89) target shifting authority and/or modifying vaccine requirements for certain school types. Evidence-Based Policy as the Path Forward State and territorial health agencies are foundational to preventing the spread of infectious diseases through vaccine education and administration. ASTHO has identified public health expertise in developing vaccination policy as one of three recommended strategies that prioritize evidence-based public health authority and support agencies to protect and improve health. As this landscape further evolves, ASTHO will continue tracking legislative and executive action on this important public health issue. article yes

State Policy Trends in Cybersecurity and Public Health Preparedness Maggie Nilz Learn how states are including cybersecurity in their emergency preparedness work in this Health Policy Update. Cybersecurity is an increasingly important component of public health preparedness as state cybersecurity policy intersects with public health agency responsibilities. Public health agencies rely on interconnected digital systems and critical infrastructure for disease surveillance, laboratory reporting, emergency communications, and health data management, making cybersecurity critical to maintaining these functions. Beyond compromising sensitive data and potentially harming patients, cyber incidents can disrupt essential public health services, including emergency response operations. Health care data breaches have steadily increased over the last 15 years, highlighting growing risks for government and health systems. A recent report showed that more than 7,000 health care data breaches were reported to the Department of Health and Human Services since 2009, and reported HIPAA data breaches in 2023 were nearly double the number recorded in 2018. Meanwhile, preparedness capacity has lagged: as of 2022, only 13% of local health departments reported being prepared for cyber-related disruptions, and recent scans show cybersecurity is rarely included in emergency preparedness planning. In response at the federal level, HHS recently announced it is undoing a 2024 reorganization by returning department-wide technology responsibilities to the Office of the Chief Information Officer while refocusing the Office of the National Coordinator for Health Information Technology on improving nationwide health IT interoperability and data sharing. In recent years, state and territorial legislatures have begun to address these gaps by incorporating cybersecurity into preparedness, health care oversight, and statewide governance structures. These legislative trends signal a need to integrate cybersecurity into emergency operations plans, strengthen cross-sector coordination, and safeguard the continuity of public health services. Some of the most recent policies considered and enacted by legislatures treat cyber incidents as emergencies, expand reporting requirements, and strengthen cyber governance. Cyber Incidents Are Being Built into Emergency Preparedness Frameworks In response to these growing threats, jurisdictions have begun incorporating cyber response into emergency plans and strategies, reinforcing cybersecurity as essential to preparedness. These developments highlight growing awareness that cyber incidents can disrupt critical services, much like natural disasters. In 2025, New York enacted S 7672, which requires municipal entities and public authorities report cybersecurity incidents and demands for ransom to the state Division of Homeland Security and Emergency Services. In addition, it directs the Director of the Office of Information Services to establish cybersecurity training and protection standards for state systems as well as require cybersecurity training for state and local government employees. Virginia is currently considering HB 83, which would establish a volunteer Cyber Civilian Corps within the state IT agency to provide rapid assistance during cybersecurity incidents affecting municipalities, nonprofits, education, and critical infrastructure. Preparedness efforts also extend beyond legislation to executive action. In February 2026, Minnesota Governor Tim Walz authorized $1.2 million in state disaster assistance to support response efforts and restore critical systems in response to a cyber incident that disrupted digital services in Saint Paul on July 29, 2025. Additionally, the National Governors Association has included cybersecurity as a primary consideration for planning and preparedness in their latest edition of the Public Health Emergency Playbook. Health care and Public Health Critical Sectors Are Facing New Cyber Requirements Beyond emergency response frameworks, jurisdictions are also adopting cybersecurity reporting and planning requirements for health care and public health organizations. Companion bills in Tennessee (HB 511/SB 555) would require health care providers and facilities to notify their contracted health insurers of cybersecurity incidents. In Maine, LD 2103 would require hospitals to adopt cybersecurity plans to protect patient data and maintain operations, and must include cybersecurity training for employees and board members. New Jersey is looking to adopt and implement a more comprehensive cybersecurity plan across all sectors. This session, legislators have introduced at least two cyber security bills: A 3231 would require “sensitive businesses” (defined as those engaged in financial, essential infrastructure, or health care industries) to report cybersecurity incidents to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) when they are aware of their occurrence and would require NJCCIC to conduct a cybersecurity audit within 30 days of notification. A 3283 would require the same “sensitive businesses” to implement cybersecurity programs in accordance with standards adopted by NJCCIC and certify compliance annually. As states expand reporting and cybersecurity requirements, these obligations may intersect with public health reporting and continuity planning. States Are Strengthening Government Cyber Governance and Coordination In addition to sector-specific requirements, jurisdictions are also strengthening the governance structures responsible for coordinating cybersecurity, improving their ability to respond to large-scale incidents affecting public systems. Legislation enacted recently in Texas and California aim to improve coordination among state government by establishing a state agency centralizing cybersecurity incident prevention and response (Texas HB 150) and mandating the development of a cybersecurity playbook to strengthen information sharing (California AB 979). A 2024 bill enacted in Puerto Rico (PC 1530) requires commonwealth agencies to develop and implement a cybersecurity program, which must include a yearly risk assessment as well as vulnerability assessment. At least three jurisdictions are currently considering bills strengthening established cybersecurity programs, with two states recently passing legislation. Utah recently enacted a bill authorizing the Utah Cyber Center to conduct voluntary cybersecurity risk assessments for critical infrastructure and coordinate with government entities on infrastructure safety (HB 165). Utah also enacted legislation creating a specific funding stream for the Center to use for various activities, including implementing a statewide cybersecurity plan and conducting assessments for governmental entities (SB 123). Kansas enacted HB 2574, which would require chief information security officers for the executive, legislative, and judicial branches to adopt cybersecurity programs based on a nationally recognized standard for governmental entities. Finally, Florida recently passed SB 7024, which would expand the state’s public record exemption to include risk assessments, information related to cybersecurity breaches, and information related to data protection, ensuring the confidentiality of sensitive cybersecurity information held by state agencies; the bill is with the governor for final consideration. Key Takeaways for Preparedness Leaders Cybersecurity is critical for preparedness across multiple policy areas, and requires new planning, coordination, and oversight responsibilities. By including cyber incidents into disaster frameworks, standards for health care organizations, and governance, preparedness leaders may find themselves more directly engaged in integrating cybersecurity into emergency operations, exercises, and cross-sector partnerships. For state and territorial health agencies beginning to incorporate cybersecurity into their preparedness plans, agencies such as the Cybersecurity and Infrastructure Security Agency provide jurisdictional support and resources to guide this work. article yes

State and federal actions to expand the doula workforce and improve maternal health.

An increasing body of research finds racism can have a significant impact across one’s lifespan. Research shows that persistent exposure to racial discrimination may result in premature aging, poor health outcomes, and increased prevalence of certain chronic diseases. At every level of government, policymakers are seeking to acknowledge the systemic oppression of people of color that persists and to elevate racism as an urgent public health crisis comparable to other public health emergencies.

Two rising health trends are negatively affecting women’s health across the United States: maternal mortality (death from pregnancy or delivery complications) and severe maternal morbidity (mental and physical health consequences from a pregnancy or delivery.) Maternal mortality review committees (MMRCs) are one of the best ways to gather information on why pregnancy-related deaths occur and how to prevent them. Studies show that MMRCs can reduce maternal mortality by 20-50% since they examine the underlying causes of maternal mortality, use data to identify gaps in care, and inform a focused approach to prevent deaths and reduce disparities.

The 2020 holiday season is coinciding with a nationwide surge of COVID-19 cases. With great concern that holiday travel to see loved ones may exacerbate community spread of the virus, many states are increasing public health measures before the winter holiday season. As of November 16, 2020, 13 states and D.C. had a quarantine requirement for out-of-state travelers. The U.S. territories also have instituted travel restrictions to limit the spread of COVID-19.

Adopting a public health approach to substance use by implementing harm reduction policies across all levels of government can help communities address the overdose crisis. This post analyzes e

Public health agencies are working to reduce dementia risk and to optimize the health and well-being of people living with dementia and their caregivers.

In an effort to help meet demand, some states and territories have joined interjurisdictional licensing compacts that allow a mental health care provider licensed in one state to provide care in another state—without needing to gain licensure in multiple states. These agreements also offer guidance on patient privacy for services rendered remotely or from out-of-state.

ASTHO interview with Elizabeth Harvey, PhD, MPH, a CDC Senior Maternal and Child Health Epidemiology Program assignee to the Tennessee Department of Health. Harvey shares her thoughts on the progress Tennessee has made on opioid use disorder throughout the state’s maternal and child health population.

There are significant disparities in pregnancy-related outcomes in the United States. Many of these deaths considered preventable, so state and federal policy makers are taking steps to improve health outcomes for pregnant people.

On the 32nd anniversary of the ADA, this blog post explores state legislation around the country that supports people living with disabilities.

During the 2022 state legislative sessions, at least 20 states considered bills that would require a religious exemption to a vaccine requirement. As state legislatures continue considering vaccine protocols for COVID-19, HPV, and other diseases—along with what types of exemptions should be given—courts are reconsidering what type of vaccine requirements are constitutional.

Under the Tenth Amendment, states have the power to protect the health and welfare of their populations, including the authority to implement isolation and quarantine orders to limit the spread of disease. This post is an examination of state public health authority for isolation and quarantine.

States and territories have broad powers to protect public health and safety, including powers to prevent and control the spread of communicable disease typically exercised by state and territorial health departments. This authority is an essential tool in the fight to keep the public safe and healthy.

Continuing ASTHO’s Legislative Prospectus series—which highlights the top 10 public health policy issues for 2022—we are focusing this week on mental and behavioral health as well as supporting the public health workforce.