H.B. 1566 Summary

• Establishes privacy protections for Hawaii residents' consumer health data by requiring regulated entities and small businesses to obtain affirmative consumer consent before collecting, using, or sharing health data.

• Grants consumers rights including the ability to confirm data collection, access their health data, withdraw consent, and request deletion of their consumer health data within 45 days.

• Prohibits the sale of consumer health data without a separate, signed valid authorization from the consumer that expires one year from signature and includes specific required disclosures.

• Bans the use of geofencing technology within 2,000 feet of health care facilities to identify, track, or collect data from consumers seeking health care services.

• Declares violations to be unfair or deceptive business practices subject to enforcement under Hawaii's consumer protection laws, with exceptions for HIPAA-covered entities and certain federally-regulated health information.