# Health and Location Data Protection Act of 2024

This bill creates new rules to protect your personal health information and location data from being bought and sold without your permission. Right now, companies can collect detailed information about where you go, what medical conditions you might have, and what health-related searches you perform online—and they can sell this information to other businesses with very few restrictions. This bill would change that by requiring companies to get your clear permission before collecting or sharing this sensitive data.

The law would apply to any company that collects health or location information about you, whether that's your phone's location tracking, your fitness app, your search history for medical conditions, or data from your doctor's office. Companies would need to tell you exactly what information they're collecting and get your explicit consent before they can use it or sell it to someone else. If a company wants to use your data for a different purpose than what you originally agreed to, they'd need to ask permission again. This is different from today, where many companies bury permission requests in long terms of service that most people never read.

The bill also gives you the right to know what health and location data companies have collected about you, and you could request that they delete it. There would be penalties for companies that violate these rules, giving them a real incentive to follow the law. However, there are some exceptions—for example, law enforcement could still access this data with a warrant, and companies could share information when necessary for emergency situations. The practical effect is that your health information and movements would be treated more like the sensitive personal details they are, rather than just another product to be bought and sold in the data marketplace.