A1401

Exempts certain personal information and entities from notification and disclosure requirements.

Exempts insurance-support organizations and national securities associations from current law requirements to notify consumers of personal data collection and disclosure. Also exempts specific types of personal data from disclosure requirements, including protected health information, financial institution data, biometric data, and more. Expands the definition of de-identified data to include data de-identified in accordance with HIPAA, where recipients are contractually prohibited from reidentifying the data. This act takes effect immediately.