Hastings Cent Rep. 2019 Sep;49(5):4-5. doi: 10.1002/hast.1042.
In the early 1970s, Congress considered enacting comprehensive privacy legislation, but it was unable to do so. In 1974, it passed the Privacy Act, applicable only to information in the possession of the federal government. In the intervening years, other information privacy laws enacted by Congress, such as the Health Insurance Portability and Accountability Act, have been weak and sector specific. With the explosion of information technology and the growing concerns about an absence of effective federal privacy laws, the legal focus has shifted to the states. Signaling a new direction in state data privacy and consumer protection law, the California Consumer Privacy Act establishes important rights and protections for California residents with regard to the collection, use, disclosure, and sale of their personal information. The CCPA is certain to spur similar legislation and to affect national and international businesses that collect data from California's residents. Understanding the new law is important for all data-driven industries, including health care.
20 世纪 70 年代初,美国国会曾考虑制定全面的隐私保护立法,但未能成功。1974 年,国会通过了《隐私法案》,该法案仅适用于联邦政府掌握的信息。在此后的几年中,国会颁布的其他信息隐私法,如《健康保险携带和责任法案》,都比较薄弱且只针对特定领域。随着信息技术的爆炸式发展,以及对缺乏有效联邦隐私法的日益关注,法律重点已转移到各州。《加利福尼亚州消费者隐私法案》(California Consumer Privacy Act)的通过标志着州数据隐私和消费者保护法的一个新方向,该法案确立了加利福尼亚州居民在其个人信息的收集、使用、披露和销售方面的重要权利和保护措施。CCPA 肯定会刺激类似的立法,并影响从加利福尼亚州居民那里收集数据的国内外企业。了解这项新法律对于包括医疗保健在内的所有数据驱动型行业都很重要。