RI H7357

Requires entities that provide reproductive or gender-affirming healthcare services to obtain explicit opt-in consent before collecting or sharing consumer health data, with regulated entities complying by January 1, 2027 and small businesses by April 1, 2027

Prohibits the sale of consumer health data without a separate valid written authorization from the consumer that must include specific disclosures and expires after one year

Grants consumers the right to access their health data, withdraw consent, request deletion, and receive a list of all third parties with whom their data was shared, with responses required within 45 days

Bans the use of geofencing technology within 2,000 feet of reproductive or gender-affirming healthcare facilities to identify, track, or collect data from consumers seeking services

Allows individuals to bring civil lawsuits for injunctive relief, compensatory and punitive damages, plus attorneys' fees, and authorizes the Attorney General to enforce violations as deceptive trade practices