SB2273

Illinois SB2273 aims to protect health data privacy by regulating how entities handle health information.

The Protect Health Data Privacy Act mandates that regulated entities, which process health data, must obtain consent before collecting, sharing, or storing health data. It prohibits the sale of health data without valid authorization from the individual. The Act also requires entities to establish, implement, and maintain data security practices to protect health data. Individuals have the right to confirm if their data is being collected, sold, or shared, and to request deletion of their health data.