Sec. 28. “Sensitive data” means a category of personal data that includes any of the following:

(1) Personal data revealing racial or ethnic origin, religious beliefs, a mental or physical health diagnosis made by a health care provider, sexual orientation, or citizenship or immigration status.

Ask a business law question, get an answer ASAP!
Thousands of highly rated, verified business lawyers.
Click here to chat with a lawyer about your rights.

(2) Genetic or biometric data that is processed for the purpose of uniquely identifying a specific individual.

(3) Personal data collected from a known child.

(4) Precise geolocation data.

As added by P.L.94-2023, SEC.1.