Bill > HF2700

This bill amends the Minnesota Consumer Data Privacy Act to classify consumer health data as "sensitive data," which requires additional protections. It defines "health data" broadly to include information about a consumer's past, present, or future mental or physical health status, including diagnoses, treatments, biometric data, and genetic information, as well as specific geolocation data indicating the seeking of health services. The bill also introduces new restrictions on the use of "geofences" (technology that creates virtual boundaries around physical locations) around healthcare facilities, prohibiting their use for tracking individuals seeking care, collecting health data, or sending targeted health-related advertisements. Furthermore, it strengthens consent requirements for processing, sharing, or selling sensitive data, including health data, mandating that such consent be separate from general data processing consent and clearly disclose the categories of data, purpose of use, and entities with whom data is shared. Small businesses are also subject to new requirements regarding the sale of sensitive data and sharing of health data. The bill also mandates data privacy and protection assessments for processing sensitive data and sharing health data, and clarifies enforcement by the Attorney General.

Business and Industry, Justice

https://www.revisor.mn.gov/bills/bill.php?b=House&f=HF2700&ssn=0&y=2025