California’s AB 45 Restricts Collection of Family Planning Inform

In the digital economy, almost everything becomes a data point. Your coffee order becomes a loyalty profile. Your shoe size becomes an ad category. And, for far too long, even a visit to a health clinic could become a breadcrumb in someone else’s tracking system. California’s AB 45 is a sharp response to that reality. It is not a polite memo asking companies to “please be respectful.” It is a legal stop sign aimed at a very specific problem: the collection and misuse of personal information tied to people seeking sensitive care.

That matters because family planning visits are not ordinary consumer moments. They can involve contraception, pregnancy care, fertility services, counseling, and other deeply private health decisions. AB 45 recognizes that a person walking into a family planning center should not automatically become a target for ads, data sharing, or digital surveillance. In plain English, California is saying this: your location near a clinic is not a marketing opportunity, not a profiling signal, and definitely not a welcome mat for out-of-state fishing expeditions.

For readers, businesses, clinics, universities, and compliance teams, the law is worth understanding in detail. It has a narrow bullseye in some places, a very wide net in others, and enough nuance to make lazy summaries dangerous. So let’s untangle what AB 45 actually does, why it matters, and why companies that treat sensitive location data like pocket lint are suddenly in for a very expensive wake-up call.

What AB 45 Actually Does

At its core, AB 45 creates new protections around personal information connected to family planning centers and in-person health care sites. The law does two big things and one especially important extra thing.

1. It restricts personal information collection at or near family planning centers

The headline feature is straightforward: AB 45 makes it unlawful to collect, use, disclose, sell, share, or retain a natural person’s personal information if that person is physically located at, or within a precise geolocation of, a family planning center. That is a big sentence, but the big idea is even simpler. If someone is at or very near one of these centers, their data is supposed to stop being fair game.

The law’s definition of “precise geolocation” matters. It is tied to a radius of 1,850 feet. That means AB 45 is not just worried about data from inside a building or inside a waiting room. It reaches the surrounding zone as well. The state is clearly trying to prevent the old trick where companies say, “Technically, we did not target the clinic, just the sidewalk, the parking lot, the bus stop, and the coffee shop next door.” Nice try. California saw that move coming from a mile away, or at least about 1,850 feet away.

2. It bans certain geofencing around in-person health care entities

AB 45 also prohibits geofencing an entity that provides in-person health care services in California for certain purposes. Those purposes include identifying or tracking a person seeking, receiving, or providing health care services; collecting personal information from that person; sending notifications related to personal information or health care services; and sending ads tied to the person’s personal information or health care services.

This part is broader than many headlines suggest. The first section zeroes in on family planning centers. The geofencing section, however, applies to entities providing in-person health care services generally. That makes AB 45 more than a niche reproductive-privacy law. It is also a broader health-location privacy law with reproductive health at the center of its policy logic.

3. It protects certain research records from hostile outside demands

The law also adds protections for personally identifying research records developed or acquired during research relating to people seeking or obtaining health care services, or relating to personal information. In practical terms, AB 45 is trying to keep research data from becoming a back door into sensitive reproductive-health information when the demand comes from another state’s laws that interfere with rights protected under California’s Reproductive Privacy Act.

That is a major point. Research is supposed to help society learn, not help outsiders weaponize survey responses, interviews, or study files against patients or providers. AB 45 tries to reduce that fear so researchers, institutions, and participants are not forced to choose between knowledge and self-protection.

Why California Took This Step

The law did not appear out of nowhere. It sits in the post-Dobbs landscape, where reproductive-health privacy suddenly looks less theoretical and much more urgent. Once abortion regulation became more fragmented across states, digital traces gained new significance. A clinic visit, an app entry, a location ping, or a research interview could become evidence, pressure, harassment, or simply a terrifying unknown.

That concern is not abstract. Regulators and reporters have spent years highlighting how location data can expose visits to reproductive health clinics and other sensitive places. Earlier geofencing controversies, including enforcement actions tied to advertising near reproductive-health facilities, showed how easily location-based tools could be used to target people at exactly the moment they were making personal medical decisions. AB 45 reads like a law written by people who saw the ad-tech playbook and decided it needed fewer “creative solutions” and more legal consequences.

California’s approach also reflects a practical truth about American privacy law: HIPAA is important, but it is not the whole privacy universe. Plenty of companies handling health-adjacent data are not operating squarely inside HIPAA’s classic hospital-and-insurer lane. That leaves room for app makers, data brokers, marketing vendors, analytics tools, and other third parties to say, “Well, technically…” AB 45 is a response to that dangerous phrase. It closes part of the space where health-related location data could otherwise slip into ordinary commercial tracking.

What the Law Does Not Mean

This is where nuance matters. AB 45 is not a ban on health care providers doing normal health care things. It is also not a law that prevents every location-based function in a clinical setting. The statute contains exceptions and exemptions that keep it from becoming unworkable.

For example, the restriction on collecting or using personal information near family planning centers does not apply the same way to certain providers, health care service plans, contractors, covered entities, and business associates that are already subject to other privacy obligations. There is also an exception for collecting or using information when necessary to perform requested services or provide requested goods. So the law is not trying to stop a patient from using a service they actually asked for. It is trying to stop unrelated collection, retention, and downstream exploitation.

The geofencing section has its own carve-outs too. It allows certain geofencing uses by entities managing their own sites to provide necessary health care services. It also permits geofencing for security services protecting patients, staff, or property. That means AB 45 is not saying all location technology is evil. It is saying the technology must serve care, safety, or other lawful functions, not surveillance theater in a lab coat.

There are additional limits and exceptions involving lawful California process, emergency circumstances, informed-consent research, and some labor-related activities. So the compliance story here is not “delete every map.” It is “know exactly why you are collecting location-related information, who touches it, what they do with it, and whether the law allows that reason at all.”

Who Should Pay Attention

Ad-tech and data brokers

If your business model depends on knowing where people go and turning that into audience segments, AB 45 should set off alarms louder than a smoke detector with a fresh battery. The law targets the exact kind of activity that makes sensitive-location tracking so profitable: identifying, tracking, collecting, sharing, and advertising based on presence near health care facilities.

Businesses in this space need to think beyond obvious geofencing campaigns. The risk is not just the flashy ad buy that targets a clinic parking lot. It is also the quiet data feed, the third-party SDK, the location vendor, the analytics partner, or the retention practice that turns sensitive movement into a reusable asset. Under AB 45, that “reusable asset” can start looking a lot like a lawsuit.

Health care and reproductive-health organizations

Clinics, health systems, and reproductive-health providers should not read AB 45 and assume it is only someone else’s problem. Even where exemptions exist, organizations still need to understand what tools are running on their websites, apps, Wi-Fi systems, appointment flows, and vendor stacks. A clinic can have excellent intentions and still inherit terrible tracking habits from a vendor contract written during the “just install the pixel” era.

AB 45 is a reminder that privacy compliance is not only about patient charts. It is also about the technical systems surrounding the patient journey: booking, check-in, mobile notifications, analytics, advertising suppression, and security tools. In health care, the side door can leak as much as the front door.

Universities and researchers

For research institutions, the new protection for certain research records is especially significant. Studies involving reproductive health, pregnancy outcomes, patient experiences, or abortion access can generate highly sensitive data that participants may not want flowing into faraway legal disputes. AB 45 helps reassure participants that their contributions are less likely to be turned into ammunition by outside actors whose laws conflict with California’s protections.

That does not mean research teams can relax. It means they should tighten governance. Institutions will want clear protocols for data minimization, storage, disclosure requests, and legal review. When the subject matter is sensitive, “organized later” is not a compliance strategy. It is a future headache with a calendar invite.

Why AB 45 Matters for Privacy Policy

AB 45 is notable because it moves beyond the old privacy model of notice, consent, and fingers crossed. Many privacy laws still assume the answer is to give consumers one more disclosure, one more checkbox, and one more policy nobody reads unless they are trapped in an airport with a dead phone. California took a different approach here. For some categories of location-linked health information, the state is saying the activity is restricted outright.

That policy choice is important. It reflects the view that some data practices are too sensitive to clean up with better wording. If the harm comes from the practice itself, a prettier pop-up window is not the solution. AB 45 treats certain location and health-adjacent uses more like off-limits conduct than a negotiable customer experience.

It also shows how privacy law is becoming more contextual. A location ping near a grocery store is one thing. A location ping near a family planning center is another thing entirely. Same data category, radically different human stakes. AB 45 leans hard into that distinction, and that may influence how other states think about sensitive places, protected activities, and health-related surveillance.

Practical Examples of How AB 45 Could Play Out

Imagine a mobile ad company creates a digital boundary around a family planning center and serves ads about “pregnancy alternatives” to devices in the area. That looks exactly like the type of conduct California wants to prevent.

Now imagine a location-data broker keeps a feed showing repeat visits to certain reproductive-health sites, then packages that information into audience segments for marketers or downstream partners. AB 45 makes that kind of retention and sharing much harder to defend.

Or picture a university study collecting interviews about reproductive-health experiences. An out-of-state demand seeks personally identifying research records to support enforcement efforts tied to laws California views as interfering with reproductive rights. AB 45 adds a legal shield against that kind of disclosure.

Each example shows the same principle: sensitive health-related context changes the privacy analysis. In AB 45, context is not background decoration. It is the entire point.

Experiences Related to California’s AB 45 Restricts Collection of Family Planning Inform

One of the most revealing ways to understand AB 45 is to think about how it feels on the ground. For a patient, the experience is often simple but powerful: less fear that a private health visit will echo across their phone for the next week. No strange ads. No eerie notifications. No sense that walking into a clinic quietly enrolled them in somebody else’s behavioral dataset. Privacy, at its best, can feel almost boring. That is a compliment. People seeking care should be able to focus on their appointment, not on whether their device just became a witness.

For clinic staff, the experience is more operational. AB 45 pushes organizations to ask uncomfortable but necessary questions. What trackers are on the website? Which vendors get location-adjacent data? Does the appointment system collect more than it needs? Does the security contractor geofence the property in a compliant way? Somewhere in California, there is almost certainly a compliance officer staring at a vendor spreadsheet, sipping cold coffee, and realizing that “privacy by design” sounded much more glamorous in the conference brochure.

For privacy lawyers and security teams, the experience is a little like discovering that the hallway closet is full of mystery cables. AB 45 forces businesses to trace where sensitive information comes from, where it goes, and why it exists in the first place. That can be uncomfortable, but it is healthy. Many companies have long treated location data as ambient exhaust: always there, always collectible, always potentially useful later. AB 45 says “later” is no longer a good enough reason.

For researchers, the experience is tied to trust. Participants in sensitive health studies often agree to speak because they believe the institution will protect them. The stronger those protections are, the more likely people are to participate honestly. That matters for research quality. Fear distorts data. Silence distorts data even more. By shielding certain research records from hostile outside demands, AB 45 helps preserve the conditions that make careful public-interest research possible.

For marketers and ad-tech vendors, the experience may be less pleasant. Some will have to rethink tools and revenue streams they once treated as standard practice. But that discomfort is part of the policy design. Laws like AB 45 are meant to change incentives. If a business has been monetizing the digital residue of deeply private medical decisions, inconvenience is not a bug in the law. It is the point.

And for ordinary Californians, the experience may be subtle but meaningful. AB 45 helps restore a boundary that technology blurred: the boundary between getting care and getting tracked. That does not solve every privacy problem in reproductive health. Not even close. But it does something important. It tells patients, providers, and researchers that the state sees the risk clearly and is willing to treat some data practices as unacceptable, not merely awkward. In a world where too many systems are designed to collect first and justify later, that is a surprisingly radical message.

Conclusion

California’s AB 45 is a serious law with a simple moral instinct behind it: visiting a family planning center or seeking health care should not turn a person into a targetable data event. The statute restricts the collection, use, sharing, sale, disclosure, and retention of personal information near family planning centers, prohibits certain geofencing around in-person health care entities, and protects certain research records from hostile outside demands. Together, those provisions push back against a data economy that has often treated sensitive health context as just another monetizable signal.

For businesses, the message is clear. Sensitive location data is not casual data. For clinics and researchers, the law offers stronger guardrails, though not an excuse to stop auditing systems and vendors. For patients, AB 45 is a reminder that privacy law can still do something refreshingly practical: it can make the path to care feel less watched.

And that may be the biggest takeaway of all. The law does not promise a surveillance-free society. It does something more concrete. It tells the marketplace that some places, some moments, and some decisions deserve more than a boilerplate consent banner and a shrug. Frankly, that is overdue.