Relating to: protection of pregnant individuals’ information, authorization for disclosure, data breach, and providing a penalty.

This bill requires unregulated pregnancy centers to obtain written authorization from individuals before disclosing their personal health information, with specific requirements for what the authorization must include and how long it remains valid. The law defines unregulated pregnancy centers as facilities that do not provide abortions or emergency contraception and are not covered by existing medical privacy laws, while also establishing rules for when information can be shared without consent, such as for legal compliance or law enforcement cooperation. Centers must notify individuals if their health data is breached and face penalties for violating these privacy protections, while also being prohibited from discriminating against people who refuse to authorize information sharing. The bill creates a new section in the state statutes to establish these requirements and specifies that the law takes effect three months after publication.