On page 18, after line 5, insert the following:

"(5) The obligations imposed on regulated entities, small businesses, and processors under this chapter do not restrict a regulated entity's, small business's, or processor's ability to do any of the following:

(a) Investigate, respond to, exercise, prepare for, or defend legal claims;

(b) Provide a product or service specifically requested by a consumer;

(c) Take immediate steps to protect an interest that is essential for the life or physical safety of a consumer or another individual;

(d) Assist another regulated entity, small business, processor, or third party with any of the obligations under this chapter;

(e) Conduct internal research to develop, improve, or repair products, services, or technology;

(f) Effectuate a product recall;

(g) Identify and repair technical errors that impair existing or intended functionality; or

(h) Perform internal operations that are reasonably aligned with the expectations of the consumer or reasonably anticipated based on the consumer's existing relationship with the regulated entity or the small business, or are otherwise compatible with processing consumer health data in furtherance of the provision of a product or service specifically requested by a consumer or the performance of a contract to which the consumer is a party."