1. Short title This Act may be cited as the My Body, My Data Act of 2023 . 2. Minimization (a) Minimization of collecting, retaining, using, and disclosing A regulated entity may not collect, retain, use, or disclose personal reproductive or sexual health information, except as is strictly necessary to provide a product or service that the individual to whom such information relates has requested from such regulated entity. (b) Minimization of employee access A regulated entity shall restrict access to personal reproductive or sexual health information by the employees or service providers of such regulated entity to such employees or service providers for which access is necessary to provide a product or service that the individual to whom such information relates has requested from such regulated entity. 3. Right of access, correction, and deletion (a) Right of access (1) In general A regulated entity shall make available a reasonable mechanism by which an individual, upon a verified request, may access— (A) any personal reproductive or sexual health information relating to such individual that is retained by such regulated entity, including— (i) in the case of such information that such regulated entity collected from third parties, how and from which specific third parties such regulated entity collected such information; and (ii) such information that such regulated entity inferred about such individual