EPIC Supports D.C. Personal Health Data Security Act
Basically, EPIC is helping to protect people's health data in D.C. by supporting a new law.
EPIC testified in favor of a new law to protect health data privacy in D.C. This act aims to secure sensitive health information from misuse. Residents can voice their opinions until April 6. Stay informed and engaged in this important issue.
What Happened
On March 23, 2026, EPIC Senior Counsel Sara Geoghegan presented testimony before the D.C. City Council’s Committee on Health. The focus was on the Personal Health Data Security Amendment Act of 2025, which aims to enhance privacy protections for sensitive health information. This proposed legislation was introduced in December and seeks to establish critical safeguards for District residents.
The bill includes provisions that would prohibit geofencing around health service facilities and require organizations handling personal health data to publish clear privacy policies. Additionally, it mandates obtaining consent before collecting or disclosing any personal health data, as well as granting individuals the right to delete their data.
Who's Affected
This legislation is crucial for all District residents whose sensitive health information could be at risk. By establishing stronger privacy protections, the bill aims to empower individuals and ensure their data is handled responsibly. Health service providers and organizations that manage personal health data will also be impacted, as they will need to comply with these new regulations.
EPIC's testimony highlights the importance of these measures, emphasizing that the current notice-and-choice framework often fails to protect users effectively. Many individuals do not read lengthy privacy policies, leaving them vulnerable to data misuse.
What Data Was Exposed
The proposed amendment specifically targets sensitive health data, which includes any personal information related to an individual's health status, treatment, or medical history. By prohibiting geofencing and requiring clear privacy policies, the bill aims to prevent unauthorized tracking and ensure individuals are informed about how their data is used.
EPIC's recommendations also focus on data minimization, suggesting that companies should be accountable for the purpose of data collection rather than relying on complex privacy policies that users cannot easily understand.
What You Should Do
For residents in D.C., it is essential to stay informed about the progress of this legislation. Individuals can submit their testimony regarding the bill until April 6, allowing them to voice their opinions and concerns. Engaging in this process can help shape the future of data privacy in the region.
As the public hearing is available for viewing, residents are encouraged to educate themselves on the details of the proposed act. Supporting initiatives like EPIC's can contribute to a more secure and privacy-focused environment for personal health data management.
EPIC Electronic Privacy