Bill > H7357

This bill establishes the Reproductive Health and Gender-Affirming Healthcare Data Privacy Act to enhance protections for sensitive personal information related to reproductive and gender-affirming care. It mandates that entities collecting this data, referred to as "regulated entities" or "small businesses," must obtain explicit consent from individuals before collecting it, with certain exceptions for legally permissible purposes like providing requested services or complying with the law. The bill strictly prohibits the sale of this data without explicit consumer permission, requiring a separate authorization for sales that details who will buy the data, for what purpose, and for how long. It grants consumers the right to know what data is being collected, to access it, to request its deletion, and to withdraw consent. The act also imposes data security requirements and restricts the use of geofencing technology around healthcare facilities providing reproductive or gender-affirming services to prevent tracking or data collection. Enforcement mechanisms include the ability for individuals to sue for violations and for the Attorney General to bring enforcement actions, treating violations as deceptive trade practices. The bill takes effect upon passage.

Justice

https://status.rilegislature.gov/