SB370: Revises provisions relating to the protection of consumer information. (BDR 52-42)

Legislative Summary

AN ACT relating to data privacy; requiring certain entities to develop, maintain and make available on the Internet a policy concerning the privacy of consumer health data; prohibiting such an entity from collecting or sharing consumer health data without the affirmative, voluntary consent of a consumer in certain circumstances; requiring such an entity to perform certain actions upon the request of a consumer; requiring such an entity to establish a process to appeal the denial of such a request; requiring such an entity to take certain actions to protect the security of consumer health data; limiting the circumstances under which a processor is authorized to process consumer health data; requiring a processor to assist certain entities in complying with certain requirements; prohibiting a person from selling or offering to sell consumer health data under certain circumstances; prohibiting the implementation of a geofence under certain circumstances; prohibiting discrimination against a consumer for certain reasons; authorizing certain civil enforcement; providing penalties; and providing other matters properly relating thereto.