B. There are no protections for this data. Who gets access to it?
The only protection the requires is that there is a “privacy policy”. Here’s the actual text of the bill:
on page 3
“‘(4) A mechanism for users to take an assess-8
ment through the website and provide consent to use9
the user’s contact information, which the Secretary10
may use to conduct outreach via phone or email to11
follow up with users on additional resources that12
would be helpful for the users to review.”
and page 13
“have a privacy policy and procedures13
in place to ensure that—14
(i) the name, address, telephone num-15
ber, or any other information that might16
identify any woman seeking services sup-17
ported through the grant is not made pub-18
lic or shared with any other entity without19
the written consent of the woman; and20
(ii) the grantee adheres to require-21
ments comparable to those applicable22
under the HIPAA privacy regulation (as23
defined in section 1180(b)(3) of the Social24
Security Act (42 U.S.C. 1320d–9(b)(3)))”
I agree with you.
The only protection the requires is that there is a “privacy policy”. Here’s the actual text of the bill:
on page 3
“‘(4) A mechanism for users to take an assess-8 ment through the website and provide consent to use9 the user’s contact information, which the Secretary10 may use to conduct outreach via phone or email to11 follow up with users on additional resources that12 would be helpful for the users to review.”
and page 13
“have a privacy policy and procedures13 in place to ensure that—14 (i) the name, address, telephone num-15 ber, or any other information that might16 identify any woman seeking services sup-17 ported through the grant is not made pub-18 lic or shared with any other entity without19 the written consent of the woman; and20 (ii) the grantee adheres to require-21 ments comparable to those applicable22 under the HIPAA privacy regulation (as23 defined in section 1180(b)(3) of the Social24 Security Act (42 U.S.C. 1320d–9(b)(3)))”
source - PDF