Establishes certain data privacy protection requirements for consumer health data, health care providers, and patients.

This bill establishes privacy protections for sensitive consumer health data in New Jersey, directly affecting residents, healthcare providers, and entities handling health information. It requires explicit, informed consent for collecting or using health data (prohibiting deceptive designs or broad terms of service) and defines "consumer health data" to include medical conditions, genetic information, biometrics, reproductive health details, and location data tied to health services. Key provisions mandate that businesses must authenticate requests to exercise privacy rights and prohibit sharing data without consent, while excluding research data processed under institutional review board oversight. The law applies to all entities collecting health data from New Jersey residents or processing data linked to New Jersey consumers.