SB 1193: personal identifying information; disclosure; prohibition - Arizona

Senate Engrossed Version (02/25/2026) → Chaptered Version · 5 edits

MODERATE

The bill was reclassified from a Senate-only version to a Chaptered version approved by the Governor, indicating it has become law. The text of the bill was significantly expanded to include a new section prohibiting the sale of personal identifying information for licensees, while also clarifying that the department can still share data with other regulatory entities and disclose certain licensing history. The scope of protected information was broadened to include biometric records and bulk data that poses a privacy risk, replacing the previous narrower standard that focused on information that could 'easily identify' an individual.

Scope change

The bill's scope expanded from solely regulating the disclosure of emergency medical technician information to also prohibiting the sale of personal identifying information for all individuals licensed under Title 36 or Title 32.

SCOPE

Added a new prohibition on the sale of personal identifying information for licensees and certificate holders.

DEFINITION

Defined 'personal identifying information' to include biometric records and bulk data that poses a privacy risk.

REQUIREMENT

Changed the threshold for protected bulk information from 'can easily identify' to 'may pose a privacy risk' to broaden protection.

EXCEPTIONS

Explicitly allowed the department to share information with other regulatory entities and disclose specific licensing history.

TECHNICAL

Updated the bill header and chapter number to reflect its final approval and enactment as Chapter 155.

Introduced Version → House Engrossed Version (04/13/2026) · 4 edits · Jun 9, 2026

MODERATE

The bill was reclassified from an Introduced version to a House Engrossed version, indicating it has passed the House of Representatives. The substantive content remains largely the same, but the definition of 'personal identifying information' was expanded to explicitly include bulk data like date of birth, place of birth, race, religion, and employment history. Additionally, new exceptions were added to allow the department to share information with other regulatory entities and to disclose licensing history or disciplinary actions.

Scope change

The bill's scope was technically expanded by adding specific categories of bulk data to the definition of protected personal information, ensuring these data points are covered under the new privacy restrictions.

DEFINITION

The definition of 'personal identifying information' was updated to explicitly list bulk information such as date of birth, place of birth, race, religion, geographic indicators, employment, and education as protected data.

REQUIREMENT

A new provision was added allowing the department to share application and licensure information with other regulatory entities, including those administering licensure compacts.

A new exception was created permitting the department to disclose an emergency medical technician's licensing history and disciplinary record.

TECHNICAL

The document header was changed from 'Introduced Version' to 'House Engrossed Version,' reflecting the bill's progression through the legislative process.

House Engrossed Version (04/13/2026) → Senate Engrossed Version (02/25/2026) · 4 edits · Jun 9, 2026

MODERATE

The bill was converted from a House version to a Senate version, which completely removed the original focus on protecting personal identifying information from commercial sale. The scope was narrowed to exclusively address emergency medical services, deleting all provisions regarding the sale of general personal data and redefining the privacy exceptions to focus solely on identifying specific technicians.

Scope change

The bill's scope was significantly narrowed from a broad consumer privacy measure covering all licensed individuals to a specific emergency medical services regulation.

SCOPE

All provisions regarding the prohibition on selling personal identifying information for commercial purposes were deleted.

DEFINITION

The definition of 'personal identifying information' was removed from the general title and replaced with a version specific to emergency medical care technicians.

The criteria for 'bulk information' was tightened, changing the threshold from 'may pose a privacy risk' to 'can easily identify an emergency medical care technician.'

REQUIREMENT

The exception for sharing information was changed from allowing sharing with other regulatory entities to a stricter rule prohibiting sharing unless specific consent is obtained.

personal identifying information; disclosure; prohibition

What changed between versions

How they voted

Actions timeline

Sponsors