Bill > SB1182

This bill establishes the Personal Data Privacy Act, which creates new consumer privacy rights and data protection obligations for certain businesses that collect and process personal data of Michigan residents. Key provisions include: - Defining key terms like "controller," "processor," "sensitive data," and "sale of personal data." - Applying the act to businesses that collect or process personal data of at least 100,000 Michigan consumers or derive over 50% of their revenue from selling personal data. - Granting consumers the rights to access, correct, delete, and download their personal data, as well as opt out of targeted advertising, data sales, and certain profiling. - Requiring businesses to obtain consent before processing personal or sensitive data, limit data collection to what is necessary, secure personal data, and provide privacy notices. - Mandating that processors comply with controller instructions and assist with consumer rights requests. - Establishing requirements for data protection impact assessments on certain high-risk processing activities. - Providing exemptions for certain health, financial, and educational information, and allowing businesses to retain data for specified purposes. - Authorizing the Attorney General to investigate and enforce violations, and allowing consumers to bring civil actions. - Creating consumer privacy and data broker registry funds financed by fines and fees.