Para crear la "Ley de Protección de Datos de Salud y Privacidad Infantil en Línea de Puerto Rico"; establecer prohibiciones estrictas sobre el uso de geocercas (geofencing) alrededor de instalaciones de salud para la recopilación de datos o publicidad dirigida; ordenar configuraciones de privacidad predeterminadas de alto nivel para usuarios menores de dieciocho (18) años; prohibir la recopilación de datos de geolocalización precisa de menores sin consentimiento parental verificable; imponer penalidades; y para otros fines relacionados.

2025-2028 Session

Puerto Rico bill restricts geofencing near health facilities, requires strong privacy defaults for minors, and prohibits precise location tracking of children without verified parental consent.

Referido a Comisión(es)

Legislative bill overview

Bill PC 1061 creates Puerto Rico's "Health Data Protection and Online Child Privacy Law," establishing strict restrictions on geofencing technology around healthcare facilities, mandating strong default privacy settings for minors under 18, and prohibiting precise location data collection from children without verifiable parental consent. The legislation includes enforcement penalties for violations and creates a comprehensive regulatory framework for protecting minors' digital health and location information.

Why is this important

Children's location data and health information are among the most sensitive personal data, with significant risks including stalking, targeted advertising exploitation, and health discrimination. Companies currently use geofencing around clinics, hospitals, and mental health facilities to target advertisements or collect behavioral data—practices that disproportionately affect minors who cannot meaningfully consent. This bill addresses a regulatory gap in Puerto Rico's digital privacy protections for a vulnerable population.

Potential points of contention

Technology industry resistance: Digital advertising companies and tech platforms may argue the geofencing restrictions are overly broad, could block legitimate services (appointment reminders, telehealth), and create compliance costs that disadvantage smaller providers

Parental consent implementation: Defining "verifiable" parental consent is technically complex—unclear standards could create practical barriers to beneficial services while remaining vulnerable to workarounds

Scope and enforceability: Ambiguity about whether restrictions apply only to Puerto Rico-based entities or also to external companies operating in Puerto Rico; enforcement mechanisms and agency jurisdiction remain undefined