Which state is considering new health care data breach laws? California
What health companies are the targets of new data security laws? wearable devices and consumer-facing apps that track health data like steps taken, heart rate, etc…
Read the bill: California Assembly Bill 2688
The bill’s highlights:
- require customers’ permission—via an “opt-in” request
- Without an opt-in, personally identifiable information cannot be shared with advertisers, health plans, data resellers
- Prohibit an employer from discriminating against a worker based on findings from that employee’s health-tracker
Business’ concerns: Support privacy, concerned about overreach by government
Privacy Advocate concerns: Seek to require the devices to comply with California’s Confidentiality of Medical Information Act.
The Recorder | Lawmakers Sweat Details of Consumer Health Privacy