A few highlights of HB3159, introduced 3/21/2021:

• requires privacy notices if personal information is collected
• establishes data subject requests rights
• allows consumers to opt out of the sale or sharing of personal information
• creates a private right of action

For Businesses:

• requires businesses that collect personal information to – at or before the point of collection – inform consumers of the categories of personal information to be collected and the purposes for which the categories of personal information will be used
• would not be allowed to collect additional categories of personal information or use collected personal information for additional purposes without providing the consumer with specific notice