Rosen, Cassidy Introduce the Bipartisan Smartwatch Act to Protect Personal Health Data Stored on Wearable Personal Devices

WASHINGTON, D.C. – Today, U.S. Senators Jacky Rosen (D-NV) and Bill Cassidy (R-LA), both members of the Senate Committee on Health, Education, Labor and Pensions (HELP), announced their re-introduction of the Stop Marketing And Revealing the Wearables And Trackers Consumer Health Data Act (Smartwatch Data Act), bipartisan legislation to prevent data mining of Americans’ personal health data stored on wearable personal devices, such as smartwatches.

“While we enjoy the convenience of technological advancements brought on by apps and wearable devices, we must not forget the potential privacy risks that these devices pose,” said Senator Rosen. “I’m proud to help lead this important bipartisan piece of legislation that will strengthen privacy rights and protect the most sensitive pieces of health care information collected by apps and wearables from being sold or shared without the consumer’s consent.”

“Smart watches and wearable tech can collect an amazing amount of data about your health with or without your knowledge,” said Senator Cassidy. “The Smartwatch Act prevents big tech from collecting or selling data without the user’s consent. Americans should always know their health information is secure.”

BACKGROUND: Under current federal law, the Health Insurance Portability and Accountability Act (HIPAA) protects all interactions between patients and their doctors. HIPAA does not, however, protect health data recorded on personal devices which puts this data at significant potential risk.

More specifically, the Smartwatch Data Act defines what data is protected under the law. The bill would prevent entities that collect consumer health information from transferring, selling, sharing or allowing access to consumer health information or any individually identifiable consumer health information collected on personal health trackers. Violations of the new act would be enforced by the Department of Health and Human Services (HHS) in the same manner the department enforces HIPAA.