Bill > H5857

This bill creates the Reproductive Freedom and Gender-Affirming Care Health Data Privacy Act, which establishes comprehensive protections for sensitive health information in Rhode Island. The legislation requires regulated entities and small businesses to obtain explicit consent before collecting, sharing, or selling consumer health data related to reproductive and gender-affirming care, with strict guidelines on data handling. Key provisions include mandating clear privacy policies, giving consumers the right to access, delete, and withdraw consent for their health data, and prohibiting the use of geofencing around healthcare facilities to track or collect data about individuals seeking health services. The bill defines consumer health data broadly to include information about gender-affirming care, reproductive health, sexual health services, and related location or research data. It applies to businesses that collect data from at least 25,000-100,000 consumers annually, with implementation timelines set for January and April 2026. Violations can result in civil actions, with potential injunctive relief, compensatory and punitive damages, and enforcement by the state attorney general. The legislation aims to protect individuals' privacy and prevent potential misuse of sensitive health information, particularly in the context of reproductive and gender-affirming healthcare.