A unique requirement born out of these laws requires entities analyze which elements of their health data collection, use and sharing are "necessary' to provide products or services requested by their consumers. Under both MHMDA and SB 370, entities of all sizes, including for-profit and nonprofit organizations, may collect — defined to include 'process in any manner'. To do so, organizations should establish which data sets constitute consumer health data under the law, and which systems process that data.