On June 16, 2023, Nevada enacted Senate Bill 370 (“SB 370”), which imposes broad restrictions on the collection, use, and sale of consumer health data. This law is set to go into effect on March 31, 2024.
SB 370 is the third state law of its kind, aimed at regulating consumer health data and entities not covered by the Health Insurance Portability and Accountability Act (“HIPAA”) or other sector specific federal laws. In May 2023, Washington state enacted the My Health My Data Act; and in June 2023, Connecticut amended its recently-enacted Data Privacy Act to govern “consumer health data” with respect to consent, contracting and geofencing requirements.
