Amendment ID: S2608-26

Amendment 26

Aligning Sensitive Data Definitions

Mr. Cronin moves that the proposed new draft be amended by striking out the definition of “Sensitive data”, and inserting in place thereof the following definition:-

"Sensitive data", personal data that includes: (i) a government-issued identifier, including, but not limited to, a social security number, passport number, state identification card or driver's license number; provided, however, that "sensitive data" shall not include a government-issued identifier required by law to be displayed in public; (ii) any personal information that a controller uses to identify a consumer's mental or physical health condition, diagnosis, disability or treatment, including, but not limited to, gender-affirming health data, reproductive or sexual health data, legally-protected health care data and neural data; (iii) biometric data or genetic information that is used to uniquely identify an individual; (iv) precise geolocation information; (v) financial account log-in credentials in combination with security or access codes for such account; (vi) personal data of a consumer who a controller or processor knows is a child; (vii) a consumer's racial or ethnic origin, religious beliefs, citizenship or immigration status; (viii) information revealing consumer's sex life, sexual orientation or status as transgender or non-binary; or (ix) information that reveals the status of a consumer as a victim of a crime."