Section 603A.NEW - [Newly enacted section not yet numbered] [Request by consumer]1. Except as otherwise provided in section 25 of this act, upon the request of a consumer, a regulated entity shall: (a) Confirm whether the regulated entity is collecting, sharing or selling consumer health data relating to the consumer.(b) Provide the consumer with a list of all third parties with whom the regulated entity has shared consumer health data relating to the consumer or to whom the regulated entity has sold such consumer health data.(c) Cease collecting, sharing or selling consumer health data relating to the consumer.(d) Delete consumer health data concerning the consumer.2. A regulated entity shall establish a secure and reliable means of making a request pursuant to this section. When establishing the means for making such a request, the regulated entity must consider: (a) The need for the safe and reliable communication of such requests; and(b) The ability of the regulated entity to authenticate the identity of the consumer making the request.Added by 2023, Ch. 525,§24, eff. 3/31/2024.