Establishes certain data privacy protection requirements for consumer health data, health care providers, and patients.
Impact
The implications of A6164 are significant as it places strict regulations on how health data can be collected, shared, or sold. Regulated entities are required to obtain explicit consumer consent before engaging in any of these actions, highlighting a shift toward prioritizing consumers' rights over data handling procedures. Violations of these regulations will be considered unlawful practices, reinforcing the bill's aimed protection for consumers. Additionally, the law prohibits implementing geofences around healthcare entities to track consumers, further protecting consumer autonomy and privacy in health-related spaces.
Summary
Assembly Bill A6164 aims to establish comprehensive protections around consumer health data in New Jersey. It defines 'consumer health data' broadly, encompassing any personal health-related information that can identify a consumer. The bill mandates that regulated entities, which include businesses operating in New Jersey and those that determine how health data is collected and shared, implement a consumer health data privacy policy. This policy must detail the means by which data is collected, shared, and the rights consumers have regarding their data, including the right to withdraw consent, request deletion, and confirm data sharing practices.
Contention
Some potential points of contention regarding the bill could revolve around the balance between consumer privacy and the operational capabilities of healthcare providers and businesses. Critics might argue that stringent requirements for consent and data handling could hinder healthcare providers' ability to deliver timely services and manage their operations efficiently. The bill exempts certain entities from its regulations, including nonprofits and government entities, which could also spark debate around fairness and equal treatment within the regulatory framework. Such exemptions raise questions about the comprehensive nature of the bill and its implications for various stakeholders in the healthcare system.
Minnesota Consumer Data Privacy Act modified to make consumer health data a form of sensitive data, and additional protections added for sensitive data.
Minnesota Data Privacy Act modification to make consumer health data a form of sensitive data provision and sensitive data additional protections addition provision