Consumer Health Information Privacy Protection Act (CHIPPA) of 2024

The Consumer Health Information Privacy Protection Act of 2024 establishes new privacy rules for companies in the District of Columbia that collect, share, or sell personal health data, filling gaps left by federal HIPAA regulations which currently only cover hospitals and insurers. The bill requires these regulated entities to publish clear privacy policies, obtain explicit consumer consent before gathering data, and limit data usage strictly to the purposes originally disclosed to the individual. It also grants consumers the right to access their data, withdraw consent, demand deletion of their information, and mandates that any sale of health data requires a separate, valid authorization. Additionally, the legislation prohibits the creation of geofences around health service locations and classifies violations as unfair trade practices.