Bill > S2316

This bill amends existing law to prohibit data brokers, defined as entities that collect or buy personal data from individuals they don't have a direct relationship with and then sell or share it, from selling "sensitive data," which includes information like racial or ethnic origin, religious beliefs, health conditions, financial account details, sexual orientation, citizenship or immigration status, genetic or biometric data, and precise geolocation data, regardless of the volume of data they handle. Additionally, the bill requires data brokers to register annually with the Division of Consumer Affairs, pay a registration fee, and provide detailed information about their data collection, sales, and opt-out practices, with specific provisions for data concerning individuals under 18 years old. Failure to comply with these registration and data handling requirements can result in significant civil penalties, and the Director of the Division of Consumer Affairs is empowered to adopt necessary regulations to implement these provisions.