Bill > HR6866

This bill, the Public Health Emergency Privacy Act, aims to protect the privacy and security of health information collected during a national public health emergency, such as the COVID-19 pandemic. The key provisions of the bill include: Defining key terms like "affirmative express consent," "emergency health data," and "covered organization" to establish the scope of the legislation. Requiring covered organizations to only collect, use, or disclose emergency health data that is necessary and limited for a good faith public health purpose, and to take reasonable measures to ensure accuracy and prevent unlawful discrimination. Prohibiting covered organizations from using emergency health data for commercial purposes like advertising or discrimination in employment, housing, or public accommodations. Requiring covered organizations to obtain affirmative express consent from individuals before collecting, using, or disclosing their emergency health data, with provisions to allow individuals to revoke consent. Mandating covered organizations to publicly report on their collection, use, and disclosure of emergency health data, and to destroy or de-identify such data within 60 days after the end of the public health emergency. The bill also aims to protect the right to vote and requires reports on the civil rights impacts of emergency health data practices. Enforcement mechanisms include actions by the Federal Trade Commission and state attorneys general, as well as a private right of action for individuals.

Business and Industry

https://www.congress.gov/bill/116th-congress/house-bill/6866/all-info