Personal Health Data Security Amendment Act of 2025

This bill protects District of Columbia residents' health data by requiring companies that collect it to obtain explicit consent before use, publish clear privacy policies, and allow data deletion within 183 days. It directly affects health apps, medical providers, and any organization handling personal health information (like medical records or mental health data). Key provisions ban location tracking near health facilities (geofencing), mandate transparent data-sharing disclosures, and give people the right to demand data removal. The law creates enforceable privacy rules for health data, aligning DC with similar state-level protections.