Bill > SB1790

This bill, titled the "Arizona Consumer Data Protection Act," establishes new regulations for "data brokers," which are defined as businesses that collect, process, or transfer personal data they did not obtain directly from the individual. The bill outlines what constitutes "personal data," including sensitive information like biometric data, genetic data, precise geolocation data, and certain government-issued identifiers, while excluding deidentified data, employee data, and publicly available information. It applies to data brokers that generate a significant portion of their revenue from processing or transferring personal data or that process data from a large number of individuals. Key provisions require data brokers to post a clear notice on their website or mobile application identifying themselves as a data broker and explaining how consumers can exercise their rights. Furthermore, data brokers must register with the Secretary of State, providing details about their data practices, and maintain a comprehensive information security plan with administrative, technical, and physical safeguards to protect the personal data they hold. Violations of these requirements can result in civil penalties, and a violation of data protection measures is considered an unfair trade practice.

Government Affairs

https://apps.azleg.gov/BillStatus/BillOverview/85459