Sec. 108. Right to impermanence
169 words·~1 min read·
/bill/119/hr/8014/ih/section-108·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
A covered entity may not maintain personal information for more time than expressly consented to by an individual whose personal information is being maintained. A covered entity shall obtain express affirmative consent from an individual before maintaining the personal information of such individual for any duration. Such consent may be obtained for categories of personal information and shall give an individual options to affirmatively choose granting a covered entity consent for various durations, at least including— for no longer than needed to complete the specific request or transaction (including a reasonable estimate of such duration by the covered entity); until consent is revoked; and one or more additional durations based on reasonable expectations and norms for maintaining the category of personal information.
Where the long-term maintaining of personal information is, on its face, obvious and a core feature of the product or service at the request of the individual, and the personal information is maintained only to provide such product or service, subsections
(a)and
(b)shall not apply.