Bill > HB214

This bill, titled the "Consumer Information and Data Protection Act," establishes new regulations for how businesses collect, protect, and use personal data from New Mexico residents, referred to as "consumers" or "covered residents." It defines various terms, including "personal data" (information linked to an identifiable individual), "sensitive data" (which includes health, biometric, and financial information), and "sale of personal data" (exchanging data for value). The act applies to businesses that operate in New Mexico and process data from at least 35,000 consumers or derive significant revenue from selling data. It grants consumers rights such as accessing, correcting, deleting, and opting out of the sale or targeted advertising of their personal data, with specific protections for children's data and consumer health data. Businesses are required to be transparent about their data practices through privacy notices and must implement reasonable security measures. The Attorney General is empowered to enforce the act, with penalties for violations, and the bill includes provisions for data protection assessments and outlines exceptions for certain types of data and organizations, such as financial institutions and healthcare providers covered by federal laws like HIPAA.

https://www.nmlegis.gov/Legislation/Legislation?chamber=H&legtype=B&legno=214&year=26