SB 3 3, An Act Concerning Online Privacy, Data, and Safety Protections and an Employer’s Duty to Disclose Known Instances of Sexual Harassment or Assault Committed By an Employee When Making Employment Recommendations

There is a dire need to protect private health-related data as abortion access is under attack. Currently, consumers including Connecticut residents generally expect sensitive health information and data to remain confidential. But unfortunately, the Health Insurance Portability and Accountability Act (HIPAA) only protects personally identifiable health information as confidential. Non-HIPAA entities, like crisis pregnancy centers, are not required to keep people’s medical information confidential. These entities lawfully collect, share, and sell sensitive medical information in the same manner as all other data, including data related to medical history, diagnoses, and treatment. Black and brown communities are disproportionately targeted and harmed by the lack of strong data privacy protections first and worst.