Personal Health Data Security Amendment Act of 2025 establishes rules for handling personal health data in the District of Columbia.

The Personal Health Data Security Amendment Act of 2025 amends the District of Columbia Code to introduce new protections for personal health data. It defines terms such as "geofence," "personal health data," and "controller." The act prohibits the use of geofences around healthcare facilities for tracking or collecting personal health data. Controllers must maintain a privacy policy and cannot sell personal health data without consent. Data subjects have the right to request deletion of their data, which controllers must facilitate.

Personal Health Data Security Amendment Act of 2025 establishes rules for handling personal health data in the District of Columbia.

The Personal Health Data Security Amendment Act of 2025 amends the District of Columbia Code to introduce new protections for personal health data. It defines terms such as "geofence," "personal health data," and "controller." The act prohibits the use of geofences around healthcare facilities for tracking or collecting personal health data. Controllers must maintain a privacy policy and cannot sell personal health data without consent. Data subjects have the right to request deletion of their data, which controllers must facilitate.