Sec. 106. Right to data minimization
92 words·~1 min read·
/bill/117/s/3195/is/section-106·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
A covered entity shall not process or transfer covered data beyond what is reasonably necessary, proportionate, and limited— to carry out the specific processing purposes and transfers described in the privacy policy made available by the covered entity as required under section 102; to carry out a specific processing purpose or transfer for which the covered entity has obtained affirmative express consent; or for a purpose specifically permitted under subsection
(d)of section 110. Covered data processing and transfers consistent with this section shall not supersede any other provision of this Act.