Bill > HB376

This bill enacts the Ohio Personal Privacy Act, which applies to businesses conducting business in Ohio or targeting Ohio consumers that meet certain revenue, consumer data processing, or consumer data sale thresholds. The bill establishes requirements for businesses to provide privacy policies, allows consumers to access, correct, delete, and opt-out of the sale and targeted advertising of their personal data, and prohibits businesses from discriminating against consumers who exercise these rights. The Attorney General has exclusive authority to enforce the Act, with civil penalties up to $5,000 per violation. The bill provides an affirmative defense for businesses that maintain a written privacy program conforming to NIST standards. The Act takes effect one year after the effective date of the bill.