Bill > HB1201

This bill, the Consumer Data Privacy Act, establishes a framework for consumer data privacy in Pennsylvania. The key provisions include: - Granting consumers the right to confirm if their personal data is being processed, correct inaccuracies, delete their data, and opt out of targeted advertising, data sales, and certain profiling activities. - Requiring controllers (entities that determine the purposes and means of processing personal data) to limit data collection, obtain consent for certain processing, provide privacy notices, and allow consumers to exercise their rights. - Establishing duties for processors (entities that process personal data on behalf of controllers) to assist controllers in complying with the law. - Requiring controllers to conduct data protection assessments for high-risk processing activities. - Exempting certain entities and data types (e.g. non-profits, higher education, HIPAA-covered entities) from some or all of the law's requirements. - Granting the state Attorney General exclusive authority to enforce the law, with a cure period and consideration of factors before enforcement actions. The bill aims to provide Pennsylvania consumers with greater transparency and control over the collection and use of their personal data by businesses.

Budget and Finance, Business and Industry

https://www.legis.state.pa.us/cfdocs/billinfo/bill_history.cfm?syear=2023&sind=0&body=H&type=B&bn=1201