S 9269

As introduced: - Prohibits the sale of an individual's regulated health information. - Requires a regulated entity to obtain an individual's explicit opt-in authorization to process their regulated health information and prohibits discrimination against individuals who withhold such authorization. - Defines "regulated health information" to include information that is inferred or derived from non-health data, such as by algorithms, and precise location information that could indicate an individual is seeking health services. - Grants individuals the right to access a copy of their regulated health information and request its deletion. - Authorizes the Attorney General to enforce the act and to seek civil penalties of up to $15,000 per violation.