This bill establishes consumer rights with regard to consumer health data and defines obligations of regulated entities that collect, use and share consumer health data. The bill prohibits selling consumer health data and implementing a geofence around certain health care entities. The bill provides a private right of action for a consumer against a regulated entity for a violation of the provisions as well as civil penalties and enforcement by the Attorney General. The bill also makes violations enforceable under the Maine Unfair Trade Practices Act. The bill's requirements do not apply to government agencies and health care information subject to federal and state law related to confidentiality of health care information.