Bill > SF0065

This bill establishes comprehensive data privacy regulations for Wyoming government entities by creating new legal provisions that define personal data, outline restrictions on data handling, and mandate specific policies for data collection and retention. The bill defines key terms such as "personal data" (information linked to an identifiable person), "deidentified data" (information that cannot be reasonably linked to an individual), and specifies that government entities cannot purchase, sell, trade, or transfer personal data without explicit written consent from the individual, with limited exceptions like transferring data between government agencies or to contractors providing government services. Wyoming residents are granted the right to request a copy of their personal data from government entities and can file objections to the accuracy or handling of their data, requiring the government entity to investigate and respond within 60 days. The bill requires government entities to adopt policies that collect only necessary data, maintain data retention periods of no more than three years without justification, and protect personal information. Notably, the bill excludes judicial branches and law enforcement agencies from these requirements and provides a phased implementation timeline, with sample policies to be developed by January 1, 2026, and full implementation for different government entities occurring between July 1, 2026, and July 1, 2028.

Business and Industry

Blockchain, Financial Technology and Digital Innovation Technology (Other)

https://www.wyoleg.gov/Legislation/2025/SF0065