To protect the privacy of personally identifiable health and location data, and for other purposes.
Summary
What This Bill Does
The bill provides privacy of health data It shall be unlawful for any covered entity to use the health data of an individual that is collected from any source (including data volunteered by an individual, medical center-derived, provides unfair and deceptive acts and practices relating to location data It shall be unlawful for a data broker to sell, resell, license, trade, transfer, share, or otherwise provide or make available location data, and requires right of access and deletion A covered entity shall make available a reasonable mechanism by which an individual, upon verified request, may access— any health data or location data relating to such individual. It relies on compliance mandates, definition changes, appropriations, and product standards. The main policy areas are Healthcare Consumers, Finance, Healthcare, and Housing.
Who Benefits and How
Public beneficiaries or protected communities affected by the clause could face reduced risk, Financial services firms and customers affected by the bill could face lower compliance burdens, and Patients and health care consumers affected by the bill could face lower compliance burdens.
Who Bears the Burden and How
Federal, state, or local agencies responsible for implementing the clause would take on compliance duties, Regulated entities and members of the public affected by the bill would take on compliance duties, and Patients and health care consumers affected by the bill would take on compliance duties.
Key Provisions
- Provides privacy of health data It shall be unlawful for any covered entity to use the health data of an individual that is collected from any source (including data volunteered by an individual, medical center-derived...
- Provides unfair and deceptive acts and practices relating to location data It shall be unlawful for a data broker to sell, resell, license, trade, transfer, share, or otherwise provide or make available location data...
- Requires right of access and deletion A covered entity shall make available a reasonable mechanism by which an individual, upon verified request, may access— any health data or location data relating to such individual...
- Requires exceptions Nothing in this Act, or a regulation promulgated under this Act, shall apply with respect to health data or location data that is collected, retained, used, or disclosed by a covered entity for...
- Requires effective date The prohibitions under sections 2 and 3 shall take effect on the earlier of— the date the Commission issues the final rule under subsection (b); or 180 days after the date of enactment of this...
Evidence Chain:
This summary is generated from the full bill text using AI analysis. Expand "Detailed Analysis" below for identified beneficiaries/burden bearers with clause-level evidence links.
At a Glance
What This Bill Does
The bill provides privacy of health data It shall be unlawful for any covered entity to use the health data of an individual that is collected from any source (including data volunteered by an individual, medical center-derived, provides unfair and deceptive acts and practices relating to location data It shall be unlawful for a data broker to sell, resell, license, trade, transfer, share, or otherwise provide or make available location data, and requires right of access and deletion A covered entity shall make available a reasonable mechanism by which an individual, upon verified request, may access— any health data or location data relating to such individual.
Key Policy Areas
Healthcare Consumers, Finance, Healthcare, Housing
Primary Purpose
The bill provides privacy of health data It shall be unlawful for any covered entity to use the health data of an individual that is collected from any source (including data volunteered by an individual, medical center-derived, provides unfair and deceptive acts and practices relating to location data It shall be unlawful for a data broker to sell, resell, license, trade, transfer, share, or otherwise provide or make available location data, and requires right of access and deletion A covered entity shall make available a reasonable mechanism by which an individual, upon verified request, may access— any health data or location data relating to such individual.
Policy Domains
Whole bill
Identified Gains
- Public beneficiaries or protected communities affected by the clause
- Financial services firms and customers affected by the bill
- Patients and health care consumers affected by the bill
- Businesses and employers affected by the bill
- Telecommunications providers and users affected by the bill
Identified Costs
- Federal, state, or local agencies responsible for implementing the clause
- Regulated entities and members of the public affected by the bill
- Patients and health care consumers affected by the bill
- Tribal governments and members affected by the bill
- Telecommunications providers and users affected by the bill
Sponsors
Legislative Progress
IntroducedMs. Klobuchar (for herself, Ms. Warren, and Ms. Hirono) introduced …
Impact analysis is available but no clear stakeholder effects identified. View clause-level analysis →
Bill Structure & Actor Mappings
Who is "The Secretary" in each section?
We use a combination of our own taxonomy and classification in addition to large language models to assess meaning and potential beneficiaries. High confidence means strong textual evidence. Always verify with the original bill text.
Learn more about our methodology