Bill

Bill > HB1051


MS HB1051

MS HB1051
Mississippi Consumer Privacy Protection Act; create.


summary

Introduced
01/16/2026
In Committee
01/16/2026
Crossed Over
Passed
Dead
02/03/2026

Introduced Session

2026 Regular Session

Bill Summary

An Act To Create The Mississippi Consumer Privacy Protection Act; To Define Terms; To Provide That This Act Applies To Certain Persons Conducting Business Within The State That Exceeds Twenty-five Million Dollars In Revenue; To Exempt Certain Persons And Certain Data From This Act; To Grant Consumers The Right To Request A Controller Of The Consumer's Personal Information To Grant Access To, Correct Inaccuracies In, Delete Or Opt Out Of The Processing Of Such Personal Information; To Provide That A Consumer May Invoke The Consumer Rights Granted Under This Act At Any Time By Submitting A Request To A Controller Of Personal Information; To Require A Controller To Respond To A Consumer Within At Least Forty-five Days; To Require A Controller To Establish An Appeal Process For A Consumer To Appeal The Controller's Refusal To Take Action As Requested By The Consumer; To Require A Controller To Adopt And Implement Reasonable Administrative, Technical And Physical Data Security Practices To Protect The Confidentiality, Integrity And Accessibility Of Personal Information; To Require The Controller To Provide Consumers With A Reasonably Accessible, Clear And Meaningful Privacy Notice, Which Shall Include The Methods By Which A Consumer Can Request To Exercise The Rights Granted Under This Act; To Require A Controller Who Sells A Consumer's Personal Information To Third Parties Or Engages In Targeted Advertising To Provide Clear And Conspicuous Disclosure Of Such Activity To A Consumer; To Require Processors Of Personal Information To Assist Controllers In The Duties Imposed Under This Act; To Require Controllers To Conduct And Document A Data Protection Assessment Of Certain Processing Activities Involving Personal Information; To Require A Controller In Possession Of De-identified Data To Take Reasonable Measures To Ensure The Data Cannot Be Associated With A Natural Person; To Provide That Nothing In This Act Restricts A Controller Or Processor's Ability To Comply With Other Laws, Investigations Or Law Enforcement Requests, To Defend Legal Claims, To Provide Certain Products Or Services Specifically Requested By The Consumer, To Perform Under A Valid Contract, To Respond To Security Incidents, Or To Engage In Scientific Or Statistical Research; To Provide That Nothing In This Act Restricts A Controller Or Processor's Ability To Use Data To Conduct Research, Effectuate A Product Recall, Respond To Technical Errors, Or Perform Certain Internal Operations; To Provide That The Attorney General Shall Have The Exclusive Authority To Enforce This Act; To Authorize The Attorney General To Investigate Potential Violations Of This Act And Issue Civil Investigative Demands; To Provide Certain Relief And Civil Penalties For Violations Of This Act; To Amend Section 45-38-9, Mississippi Code Of 1972, To Provide That The Requirements Of The Walker Montgomery Protecting Children Online Act Shall Control In The Case Of A Conflict With This Act; To Bring Forward Section 11-77-5, Mississippi Code Of 1972, For The Purpose Of Possible Amendment; And For Related Purposes.

AI Summary

This bill, known as the Mississippi Consumer Privacy Protection Act, establishes new rights for consumers regarding their personal information and imposes obligations on businesses that collect and process this data. It applies to companies conducting business in Mississippi with revenues exceeding $25 million that either control or process personal information of at least 25,000 consumers and derive over 50% of their gross revenue from selling personal information, or control or process personal information of at least 175,000 consumers annually. The act grants consumers the right to request access to, correction of, or deletion of their personal information, and to opt out of its sale or use for targeted advertising and profiling. Businesses, referred to as "controllers," must respond to these requests within 45 days, establish an appeals process, and implement reasonable data security measures. They must also provide clear privacy notices and disclose if they sell personal information or engage in targeted advertising. The Attorney General will have exclusive authority to enforce this act, with potential for civil penalties for violations. The bill also includes exemptions for certain entities and data types, such as financial institutions, healthcare providers, and government agencies, and clarifies that it does not restrict a controller's ability to comply with other laws or respond to legal or security matters. Importantly, in cases of conflict with the Walker Montgomery Protecting Children Online Act, that act will take precedence.

Committee Categories

Justice

Sponsors (1)

Last Action

Died In Committee (on 02/03/2026)

bill text


bill summary

Loading...

bill summary

Loading...
Loading...