An Act relative to consumer health data

This bill creates a new Consumer Health Data Act in Massachusetts to protect individuals' personal health information from unauthorized collection and use. It defines "Consumer Health Data" broadly to include medical records, genetic information, biometric data, and even health-related data inferred from other sources like purchase history. The law requires companies to obtain clear, written, opt-in consent from consumers before collecting or sharing this data, explicitly banning consent obtained through pre-checked boxes or general terms of service agreements. Additionally, the bill establishes strict rules for how data can be shared with affiliates and excludes certain categories like employment records and approved scientific research from these protections.