California Consumer Privacy Act of 2018.
The amendments made by AB 713 are intended to mitigate negative impacts on health and research sectors, which could arise from the stringent requirements introduced by the CCPA. Specifically, it protects the use of deidentified data derived from medical information, facilitating research while safeguarding consumer privacy. The bill effectively safeguards public health initiatives and research by ensuring that essential data can be utilized without infringing on privacy rights, addressing a recognized public need for accessible health data.
Assembly Bill 713, also known as an amendment to the California Consumer Privacy Act (CCPA), aims to revise and bolster consumer protections regarding personal information. This bill introduces new exceptions for deidentified information, allowing certain types of data that have been stripped of individual identifiers to be used within medical and research contexts. By clarifying the treatment of deidentified medical information, the bill seeks to ensure that businesses can still utilize valuable data for health-related research while complying with privacy regulations.
The sentiment surrounding AB 713 seems favorable among health professionals and researchers who argue that its provisions support critical health research. Conversely, consumer advocacy groups may express concern regarding the potential for misuse of deidentified data, fearing that it could lead to privacy violations if not properly regulated. Overall, the bill attempts to strike a balance between enabling research and protecting consumer rights, a sentiment that elicits strong support among research entities but cautious reception from privacy advocates.
Notable points of contention include the balance between deidentification and the potential for reidentification of data. While AB 713 prohibits the reidentification of deidentified information except under specific circumstances, opponents may argue that the definitions and boundaries of 'deidentified' are too lenient, potentially leading to privacy breaches. Furthermore, the bill establishes conditions around contracts for data sales that will require vigilance and compliance to ensure that consumers are adequately protected from unauthorized reidentification efforts.