HB5497 - Geolocation Privacy Protection Act

• Creates the Geolocation Privacy Protection Act requiring private entities operating location-based applications to obtain affirmative express user consent before disclosing geolocation information to third parties.

• Requires notice to users that must specify: (1) that geolocation information will be disclosed, (2) the purposes for disclosure, and (3) names and categories of entities receiving the information.

• Permits disclosure without consent for: parental/guardian location of minors, court-appointed guardian location of incapacitated persons, emergency services, court orders/subpoenas, and consumer transactions where disclosure is reasonably expected.

• Classifies violations as unlawful practices enforceable by the Attorney General under the Consumer Fraud and Deceptive Business Practices Act with no private right of action.

• Exempts health care providers regulated by HIPAA, financial institutions under Gramm-Leach-Bliley Act, and transportation network providers whose sole function is providing services based on geolocation information.