HIPAA, but for non-Covered Entities?

A proposed bill from Sen. Bill Cassidy would extend HITECH/HIPAA-style privacy and security obligations to entities that process consumer health data outside traditional HIPAA-covered environments, require plain-language disclosures when non-HIPAA entities access such data, explain potential disclosures, and obtain consent before selling the data.