Bill > S569

This bill, the Consumer Privacy Act, establishes new consumer privacy rights and responsibilities for businesses that collect and process personal data. Key provisions include: - Definitions and scope, with exemptions for certain entities and types of data. - Consumer rights to access, correct, delete, and download their personal data, as well as opt out of targeted advertising, data sales, and certain profiling. - Requirements for businesses (controllers) to limit data collection, obtain consent for certain uses, secure data, and provide transparent privacy notices. - Responsibilities for businesses (controllers) and their service providers (processors) in how they handle consumer data. - Requirements for businesses to conduct data protection assessments for certain data processing activities. - Provisions around de-identified and pseudonymous data. - Enforcement by the state Attorney General, with penalties for violations. - Creation of a Consumer Privacy Fund to support the Attorney General's enforcement efforts. The bill would take effect on January 1, 2023, with some sections effective upon becoming law.