A few highlights of HB3159, introduced 3/21/2021:
- requires privacy notices if personal information is collected
- establishes data subject requests rights
- allows consumers to opt out of the sale or sharing of personal information
- creates a private right of action
For Businesses:
- requires businesses that collect personal information to – at or before the point of collection – inform consumers of the categories of personal information to be collected and the purposes for which the categories of personal information will be used
- would not be allowed to collect additional categories of personal information or use collected personal information for additional purposes without providing the consumer with specific notice