Establishes certain data privacy protection requirements for consumer health data, health care providers, and patients.

S 2969 establishes strict privacy protections for sensitive health data in New Jersey, directly affecting residents whose health information is collected within the state and the healthcare providers or entities handling that data. The bill requires explicit, opt-in consent for collecting health data (prohibiting "deceptive designs" or broad terms of service), mandates secure authentication for data requests, and defines "consumer health data" to include medical conditions, genetic information, biometrics, reproductive health details, and location data tied to healthcare visits. It prohibits selling or sharing this data without consent and creates mechanisms for consumers to access or delete their information. The law excludes data used in approved research by institutional review boards, focusing on protecting personal health information from misuse by commercial entities.