Consumer Reports supports legislation before the D.C. Council, the Consumer Health Information Privacy Protection Act (CHIPPA). The bill would extend to D.C. consumers important new protections relating to consumer health data, including prohibitions against collecting such data without consent, sharing that data without separate and distinct consent, and selling that data without written or electronic authorization, as well as the right to know the consumer health data companies have collected about them and the right to delete that information.
In particular, we appreciate that CHIPPA includes:
- A strong definition of consumer health data
- A private right of action
- Restrictions on collection without consent, opt-in for sharing, and written authorization for sales
- Non-discrimination provisions.
To read the full letter, please see the attached PDF.