Bill > SB0359

This bill establishes comprehensive privacy protections for Michigan residents by creating the Personal Data Privacy Act, which governs how businesses collect, process, use, and share personal data. The legislation applies to businesses that process data for at least 100,000 consumers or 25,000 consumers if they derive revenue from selling personal data. Key provisions include requiring businesses to provide clear privacy notices, obtain consumer consent before processing sensitive data, and allow consumers to access, correct, delete, and opt out of data processing for targeted advertising or sales. The bill defines various types of personal data, including sensitive categories like biometric data, health information, and precise geolocation data, and provides special protections for minors and sensitive information. Businesses must implement data protection measures, limit data collection to what is necessary, and provide mechanisms for consumers to exercise their privacy rights. The Attorney General is granted exclusive enforcement authority, with the ability to investigate potential violations and impose civil fines up to $7,500 per violation. The bill also creates two new funds: a consumer privacy fund and a data broker registry fund, and requires data brokers to register annually with the state. Notably, the law will take effect one year after its enactment, giving businesses time to adapt to the new requirements.

Budget and Finance

https://legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0359