{"page":"/blog/california-cmia-health-data-advertising","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Component","Law and section","What changes under the text"],"rows":[["Pixels and SDKs in CMIA-covered apps or patient portals","CMIA 56.10(a), (d); 56.11","Disclosure to an ad platform needs a 14-point, separately signed authorization"],["Audience building from patient or app data","CMIA 56.10(d)","Marketing use needs express authorization"],["Health publisher tags","CCPA 1798.140(ah); 1798.121","Honour opt-outs of sharing and the right to limit; contract terms with ad partners"],["Page titles and URLs in ad calls","CCPA purpose limitation, per the Healthline settlement","Titles suggesting a diagnosis are a known enforcement target"],["Location data","CCPA 1798.140(ae)","Precise geolocation is sensitive; subject to the right to limit"],["Vendor contracts","CCPA (per the Healthline allegations)","Required privacy terms in advertising contracts, verified rather than assumed"]],"sourceUrls":[[],[],[],[],[],[]]}