Bill > HB2257

This bill establishes the Consumer Data Protection Act, which provides for the protection of certain personal data of consumers, imposes duties on controllers and processors of personal data, provides for enforcement by the Attorney General, prescribes penalties, and establishes the Consumer Privacy Fund. The bill gives consumers the right to confirm if their personal data is being processed, access and correct their personal data, delete their personal data, and opt out of targeted advertising, data sales, and certain types of profiling. Controllers have duties to limit data collection, obtain consent for certain processing, implement security practices, and provide consumers with privacy notices. The bill also establishes requirements for data protection assessments, the use of de-identified data, and enforcement procedures. The Attorney General is responsible for administering and enforcing the act.