Bill > SB974

This bill establishes a framework to regulate controllers and processors with access to personal consumer data. It grants consumers the right to confirm if their personal data is being processed, access and correct their data, delete their data, obtain a copy of their data, and opt-out of certain processing activities like targeted advertising and the sale of their data. The bill imposes responsibilities on controllers and processors, including data security requirements, parental consent for children's data, and restrictions on discriminating against consumers who exercise their rights. The bill gives the Department of the Attorney General exclusive authority to enforce the law and establishes a consumer privacy special fund to fund the administration of the law. The bill appropriates funds and takes effect on July 1, 2050.