Manatt Health October 5, 2023
Connecticut is the latest state to establish wide-ranging privacy protections for consumer health data and the first to weave such protections into a preexisting comprehensive consumer privacy law. The new law, S.B. 3, amends the Connecticut Data Privacy Act (CTDPA), which took effect July 1, to include obligations and restrictions on processing, sharing and selling consumer health data that is not otherwise regulated by the federal Health Insurance Portability and Accountability Act (HIPAA).
The amendments—which took effect October 1—include provisions similar to Washington’s My Health My Data Act (MHMD) and Nevada’s health data privacy bill, S.B. 370, both of which will take effect next year. Here are some highlights:
A more expansive definition of health data
The CTDPA already classifies...
Today's Sponsors
Today's Sponsor