Bill > HB1497

This bill establishes a framework to regulate controllers and processors with access to personal consumer data in Hawaii. The key provisions are: - Defines various terms related to consumer data, including "controller," "processor," "personal data," "sensitive data," and "sale of personal data." - Gives consumers rights to access, correct, delete, and download their personal data, as well as opt out of targeted advertising, data sales, and certain profiling. - Requires controllers to limit data collection, secure personal data, and provide transparent privacy notices to consumers. - Establishes responsibilities for controllers and processors, including data protection assessments for higher-risk data processing. - Exempts certain types of data and processing activities from the bill's requirements. - Grants the state Attorney General investigative and enforcement authority, with violations subject to civil penalties. - Takes effect on June 30, 3000.