Connecticut has become the latest state to introduce extensive privacy protections for consumer health data. As a first among states, the newly enacted legislation intertwines health data protections into an already established comprehensive consumer privacy law.
Having taken effect on July 1, 2021, the new law, titled S.B. 3, makes critical amendments to the Connecticut Data Privacy Act (CTDPA). The focus of the revisions lies primarily with consumer health data that is currently unregulated under the Federal Health Insurance Portability and Accountability Act (HIPAA).
The alterations and additions in S.B. 3 impose obligations on the processing, sharing, and selling of health data for consumers. Directly affecting corporations who handle sensitive health data, the legal changes necessitate an awareness and understanding of the new mandates and restrictions, ensuring compliance with the altered legislation.
To gain further insight into S.B. 3, interested parties can consult the detailed analysis of the law, published by Manatt, Phelps & Phillips, LLP.
The Connecticut revision of data privacy law serves as a reminder of the evolving landscape of consumer health data protection. Legal professionals dealing with consumer privacy rights should remain informed about such revisions to existing laws to maintain compliance and stay ahead of the changes.