Lexology December 13, 2023
If your organization does business across the U.S. and collects consumer health data (broadly defined, health inferences generated from non-health data count), compliance with U.S. state consumer health privacy laws is just around the corner. Consumer health privacy laws in Nevada (Senate Bill 370) and Washington (the My Health My Data Act) become fully operative for regulated entities on March 31, 2024. Requirements specific to consumer health data are already operative in Connecticut.
Here are the top 6 things to do now:
1. (Re)consider online tracking technologies and don’t sell consumer health data. Organizations in the health or wellness related industries should weigh the advantages of any online tracking technologies against the risks that such tracking, which typically involves disclosing...