Contact lens sellers must now offer secure digital prescriptions.

What it does

This bill updates the 1990 Fairness to Contact Lens Consumers Act to require online contact lens sellers to offer a secure electronic method for customers to submit their prescriptions (compliant with HIPAA privacy rules) and to encrypt any protected health information sent by email. It also adds email addresses to the contact information sellers must maintain and clarifies that the law's restrictions on robocalls do not apply to artificial or prerecorded voice calls.

Why we flagged it

The bill's operative mechanism is to modernize prescription verification by adding digital submission and encryption requirements. It is a straightforward consumer-protection and data-privacy amendment to existing law, not a deregulation, subsidy, or carve-out.

What the text implies

• The robocall clarification (excluding artificial/prerecorded voice calls from the definition of 'call') may narrow the scope of the existing robocall restriction, potentially allowing sellers to use automated voice systems to contact customers about prescriptions — a minor but unrelated change to the bill's stated modernization purpose.
• HIPAA compliance requirement ties online sellers to federal privacy standards but does not explicitly address state-level privacy laws (e.g., CCPA, GDPR for international sellers), creating potential compliance gaps for multi-state operators.

Who it affects

Consumers gain a secure, modern way to submit prescriptions electronically and receive stronger protection for their health data (encryption requirement). Online sellers face new compliance costs, but these are modest and serve a legitimate public health and privacy interest.