Bill > SB2779

This bill introduces the Mississippi Consumer Data Privacy Act, a comprehensive law designed to protect consumers' personal data and provide them with greater control over their information. The bill defines a "business" as any for-profit entity that meets specific revenue or data collection thresholds and establishes a broad definition of "personal information" that includes identifiers, online activity, geolocation data, and other sensitive details. Consumers are granted several key rights, including the ability to know what personal information is being collected about them, request disclosure of how their data is used or sold, opt-out of data sales, access their collected information, and request deletion of their personal data. The legislation prohibits businesses from discriminating against consumers who exercise these rights and requires companies to provide clear methods for consumers to submit information requests. Businesses must implement specific notice requirements, such as creating a "Do Not Sell My Personal Information" link on their websites and responding to consumer requests within 45 days. The bill also allows consumers to take legal action if their non-encrypted personal information is subject to unauthorized access, with potential damages ranging from $100 to $750 per incident. Importantly, the law will take effect on July 1, 2025, and the Attorney General is tasked with developing regulations to implement the act, ensuring a comprehensive approach to data privacy protection in Mississippi.