Bill > HB827

This bill establishes the Menstrual Data Privacy and Protection Act, which creates comprehensive legal protections for individuals' menstrual and reproductive health data. The legislation requires entities (including apps, healthcare providers, pharmacies, and retailers) to obtain explicit consent before collecting, processing, or sharing menstrual data, and strictly prohibits selling such data to third parties under any circumstances. Entities must implement robust security measures like data encryption, conduct regular security audits, and notify individuals and the Attorney General within 72 hours of any data breaches. Individuals are granted the right to request deletion of their menstrual data within 30 days, and entities must comply with such requests. The bill mandates that entities publish detailed public privacy policies and annual reports about their data protection practices. Violations can result in significant penalties, including civil penalties up to $50,000 per violation or $500 per affected individual, with individuals also empowered to bring civil actions seeking damages up to $2,500 per violation. The primary goal is to safeguard sensitive personal information by ensuring individuals maintain control over their menstrual and reproductive health data and protecting against unauthorized use or disclosure.

Transportation and Infrastructure

https://www.legis.ga.gov/legislation/71617