Effective 1-1-2026.
Sec. 28. "Sensitive data" means a category of personal data that includes any of the following:
(1) Personal data revealing racial or ethnic origin, religious beliefs, a mental or physical health diagnosis made by a health care provider, sexual orientation, or citizenship or immigration status.
(2) Genetic or biometric data that is processed for the purpose of uniquely identifying a specific individual.
(3) Personal data collected from a known child.
(4) Precise geolocation data.