Summary
Expands consequential-profiling rights, impact assessments, and privacy-notice disclosures about large-language-model training. Significant decisions expressly include healthcare services; relevant privacy amendments take effect July 1, 2026; the new profiling impact-assessment requirement applies to processing created or generated from August 1, 2026.
Healthcare Implications
Covered consumer-health services must assess applicable profiling and support statutory opt-out and explanation rights. HIPAA-covered entities and business associates, insurers, health carriers, and specified clinical data are exempt. Housing-specific reevaluation does not create general healthcare human review.
Operational Implications
- Maintain required impact assessments for consequential profiling, including inputs, outputs, performance limitations, risks, and safeguards; the new requirement applies to processing created or generated on or after August 1, 2026.
- Provide detailed consequential-profiling impact assessments to the Attorney General when requested during an investigation; assessments are confidential.