HEALTH DATA PRIVACY ACT

HB 430, the Health Data Privacy Act, establishes new privacy rules for businesses (not healthcare providers) that handle New Mexico residents' health data, such as fitness apps or health-related services. It requires these entities to publicly share clear privacy policies, provide accessible tools for individuals to manage their data, and implement security measures to protect health information. The bill specifically prohibits using health data for targeted advertising without explicit consent, bans processing precise location data related to health services unless necessary, and mandates transparent consent processes disclosing data uses and sharing. Businesses must obtain separate, clear consent before collecting health data, detailing what information is gathered, how it will be used, and how individuals can withdraw consent.