B26-0525
DC
introduced
Personal Health Data Security Amendment Act of 2025
privacy
Plain-English summary
1. **ONE-SENTENCE SUMMARY:** Bill B26-0525 aims to protect personal health data by prohibiting geofencing around health service facilities and requiring clear privacy policies and consent for data collection.
2. **KEY REQUIREMENTS:**
- No geofencing around health service facilities.
- Publish clear and accessible privacy policies detailing data collection, usage, and sharing practices.
- Obtain explicit consent from individuals before collecting, processing, or disclosing personal health data.
- Allow individuals to withdraw consent at any time.
- Provide individuals with the right to delete their personal health data.
3. **DEADLINES:**
- The bill is currently in the introduction stage; the effective date will be determined once passed.
4. **PENALTIES:**
- Specific fines and enforcement mechanisms are not detailed in the current text, but non-compliance could lead to legal action or regulatory penalties.
5. **SMB IMPACT:** Small businesses in the health sector will need to update their privacy policies and consent processes, which may require additional resources and training to ensure compliance with the new regulations.
Source description
As introduced, Bill 26-525 would prohibit geofencing around facilities that provide health services, preventing the tracking or targeting of individuals based on their location. It would require controllers (the entities that determine how and why personal health data is used) to publish clear, accessible privacy policies describing what data is collected, how it is used, and with whom it is shared. It would also mandate consent before any collection, processing, or disclosure of personal health data, and allows individuals to withdraw consent at any time. It would also create a right to deletion.
Not legal advice. Summaries are generated by AI from publicly available bill text and may contain errors or omissions. Always consult counsel before making compliance decisions.