WeVote

Bill

Bill

SD 1696

An Act relative to consumer health data

194th Legislature (2025-2026) Introduced by Manny Cruz and 2 co-sponsors

Massachusetts bill establishing privacy protections, consumer rights, and security standards for health data held by non-regulated businesses and health-related companies.

House concurred
0
WeVote Research Nonpartisan
Bill Summary · SD 1696

Legislative bill overview

SD 1696 establishes privacy and security protections for consumer health data in Massachusetts. The bill creates requirements for how health data can be collected, used, shared, and stored by businesses and healthcare entities, with enforcement mechanisms and consumer rights to access and control their information.

Why is this important

Health data is among the most sensitive personal information individuals possess, and breaches can enable identity theft, discrimination, and harassment. This legislation addresses gaps in federal privacy law (which primarily covers HIPAA-regulated entities) by extending protections to a broader ecosystem of companies collecting health information, from fitness apps to genetic testing services to health retailers.

Potential points of contention

  • Scope and definition: Disagreement over what constitutes "health data" and which businesses are covered—particularly whether retailers, tech companies, and data brokers fall within the bill's requirements
  • Business compliance costs: Industry concerns about compliance expenses, especially for smaller businesses, versus consumer advocates' concerns that weak standards allow loopholes
  • Data minimization vs. innovation: Tension between restricting what health data companies can collect/use and enabling beneficial health technology development and research
  • Enforcement mechanisms: Questions about whether penalties are sufficient to deter violations and whether Massachusetts resources are adequate for enforcement

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.