HB 78 establishes rules for businesses handling consumer data, requiring them to be transparent about data collection, secure personal information, and allow consumers to access or delete their data. It directly affects companies that collect personal information (like names, addresses, or online activity) from residents of the state. Key provisions include mandating clear privacy notices, implementing security measures, and giving consumers control over their data. Violations would result in fines imposed by the state's consumer protection agency. The bill passed final passage in October 2025 and is now law.
HB 1640 protects patient privacy for reproductive health care records in Pennsylvania. It requires healthcare providers (covered entities) to obtain written permission from patients before sharing records related to permitted reproductive services - such as pregnancy care, contraception, or abortion - except in limited circumstances like court orders, abuse investigations, or legal defense needs. The law explicitly preserves existing confidentiality protections under other state laws, including those for mental health and domestic violence services. It applies directly to patients seeking reproductive health care and the healthcare providers handling their records.
HB 1063 amends Pennsylvania's Unfair Trade Practices and Consumer Protection Law to prohibit the use of automated software for purchasing event tickets with intent to resell, bypassing sales limits, or disabling security systems. It directly affects ticket sellers (including venues, event organizers, and rights holders) and individuals or companies using bots to acquire tickets for resale. The bill makes these activities illegal, allows affected parties to sue for $1,000 per ticket sold in violation plus attorney fees, and includes exceptions for security research and enforcement activities. The law takes effect 60 days after enactment.
HB 1512 requires manufacturers of digital electronic devices (like smartphones and computers) to provide owners and independent repair shops with necessary repair documentation, parts, and tools on fair and reasonable terms. The bill mandates that manufacturers make this information accessible to enable repairs outside of official channels. It also imposes penalties for manufacturers who fail to comply with these requirements. This directly affects device manufacturers and expands repair options for consumers and small repair businesses. The bill passed final passage in the legislature on October 27, 2025, and now awaits review by the Consumer Protection & Professional Licensure committee.
HB 1822 would protect personal data (like home addresses and phone numbers) of Pennsylvania public servants - such as police officers, teachers, and government workers - from being sold or misused by data brokers. It requires data brokers to delete this information upon request and follow new rules when collecting or sharing it. The bill also creates a civil enforcement mechanism, allowing affected individuals to sue companies that violate these protections. Currently, the bill is stalled in the House after being amended and reported by the Judiciary Committee.
HB 997 updates Pennsylvania's data breach notification law, requiring businesses to notify affected individuals more clearly and promptly after a security breach involving personal information. It directly affects businesses that collect or store personal data, such as healthcare providers, retailers, and financial institutions. Key changes include modernizing definitions of personal information, clarifying when notification is required, adding new security protections, and repealing outdated civil relief provisions. The bill also removes certain exemptions that previously allowed businesses to delay or avoid notifying individuals about breaches.
