California Enhances Privacy Protections for Your Health and Location Data: What You Need to Know

On September 26, 2025, California Governor Gavin Newsom introduced a significant new law: Assembly Bill 45 (AB-45). This law aims to bolster privacy protections for people receiving or providing health care services, particularly in reproductive health care.

What Does AB-45 Do?

1. Stronger Privacy Measures:
   AB-45 limits how personal information collected near family planning centers can be used. This includes rules on geolocation data, meaning companies can’t track your location near these sensitive facilities without consent.

2. Broader Definitions:
   The law broadens the definitions of terms like “personal information” and “geofencing.” Now, any organization, not just businesses, must adhere to these privacy guidelines.

3. Private Right of Action:
   If someone feels their rights under this law are violated, they can sue for damages—up to three times the actual damages, plus legal fees.

Key Features of AB-45:

• Limitations on Data Use:
  Companies can’t collect or share personal data near family planning centers unless it’s directly related to the services requested by an individual.

• Prohibition on Geofencing:
  Using geofencing technology around health care facilities to gather data or send targeted ads is prohibited. Exemptions exist for facilities that geofence to provide essential health care services or for security measures.

• Protection of Research Records:
  Personal data from research cannot be disclosed in response to subpoenas that violate a person’s rights under California law.

Impact on Healthcare Privacy

One of the important aspects of this law is how it reflects a growing concern over privacy in health care. In a recent survey, 70% of respondents expressed worry about their health data being misused. Experts note that as technology advances, protecting patient information becomes ever more critical. Dr. Emily Chen, a privacy specialist, emphasizes that “laws like AB-45 are vital in maintaining trust between patients and health care providers.”

What’s Next?

AB-45 will go into effect on January 1, 2026. This gives organizations time to adjust their practices. Noncompliance can lead to significant penalties, including fines of $25,000 for each violation, underscoring the seriousness of the law.

In a time where protecting personal data has become a hot topic, California’s AB-45 stands as a bold step forward. As the landscape of health care privacy continues to evolve, laws like this may influence other states to enhance their own privacy protections.

For more details, you can check the full text of the law here.

Source link