Establishes certain data privacy protection requirements for consumer health data, health care providers, and patients.

This New Jersey bill establishes new privacy protections for consumers' health data. It requires businesses (called "regulated entities") that collect health information to get explicit consent from consumers before collecting, sharing, or selling that data. Consumers gain new rights to see what health data is collected, withdraw consent, and request deletion of their data. The bill also prohibits businesses from using location tracking (geofencing) around health care facilities to collect health data. Certain entities like government agencies and healthcare providers already covered by federal laws like HIPAA are exempt from these requirements.