S. 631 · 118th Congress
UPHOLD Privacy Act of 2023
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 118th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
KlobucharSponsor2 cosponsors · 2 D
2 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
Upholding Protections for Health and Online Location Data Privacy Act of 2023 or the UPHOLD Privacy Act of 2023
What it does: CRS summary · Introduced in Senate · Mar 2, 2023
Upholding Protections for Health and Online Location Data Privacy Act of 2023 or the UPHOLD Privacy Act of 2023
This bill restricts the collection, retention, use, and disclosure of personal health data by certain commercial entities (as well as individuals, nonprofits, and common carriers). The bill does not apply to health providers, insurance plans, or related business associates that are subject to the requirements of the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
Specifically, commercial entities may not collect, retain, use, or disclose personal health data except (1) with the express written consent of the individual to whom such information relates, or (2) as is strictly necessary to provide a requested product or service. Such entities must (1) provide a reasonable means for individuals to access and delete their health data, and (2) maintain and publish a privacy policy disclosing their practices for handling personal health data.
Additionally, the bill prohibits commercial entities from using personal health data for commercial advertising.
The bill also prohibits the sale of location data to or by data brokers, including data volunteered by an individual, data derived from a medical center, data from a wearable fitness tracker, and data from web browsing history.
The bill provides for enforcement by the Federal Trade Commission and by private civil actions.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: UPHOLD Privacy Act of 2023
Also known as: Upholding Protections for Health and Online Location Data Privacy Act of 2023
Latest action (Mar 2, 2023): Read twice and referred to the Committee on Commerce, Science, and Transportation.
Policy area: Commerce · Origin: Senate · Introduced: Mar 2, 2023
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.