Bill > HB2953

This bill establishes comprehensive consumer data privacy protections for West Virginia residents, creating a robust framework for how businesses collect, use, sell, and share personal information. The bill defines personal information broadly, covering everything from basic identifiers to browsing history, geolocation data, and inferred consumer profiles. Consumers are granted several key rights, including the ability to request a copy of their personal data collected by businesses, have their personal information deleted or corrected, and opt-out of the sale or sharing of their personal information to third parties. Businesses are required to maintain transparent online privacy policies, provide clear methods for consumers to submit data requests, and respond to those requests within 45 days. The legislation prohibits businesses from discriminating against consumers who exercise their privacy rights and establishes penalties for non-compliance, including civil penalties up to $7,500 per intentional violation. Notably, the bill provides a private right of action for consumers whose personal information is subject to unauthorized access, allowing them to seek damages between $100 and $750 per incident. The law applies to businesses that meet certain thresholds, such as having annual gross revenues over $25 million or collecting personal information from 50,000 or more consumers, and includes special protections for minors, requiring explicit consent for selling or sharing their personal data.