SB 3299

Abstract

Creates the Consumer Privacy Act. Provides that a consumer has the right to request that a business that collects the consumer's personal information disclose to that consumer the categories and specific pieces of personal information the business has collected. Requires a business to, at or before the point of collection, inform a consumer as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. Requires the business to provide notice when collecting additional categories of personal information or when using a consumer's personal information for additional purposes. Provides that a consumer has the right to request that a business delete any personal information about the consumer that the business has collected from the consumer, with some exceptions. Requires a business that collects or sells a consumer's personal information to make certain disclosures to the consumer upon receipt of a verifiable consumer request. Provides that a consumer has the right, at any time, to opt out of the sale of his or her personal information to third parties. Prohibits a business from discriminating against a consumer who exercises any of the rights established under the Act by denying goods or services or charging the consumer different prices or rates for goods or services. Permits a business to provide financial incentives to a consumer that authorizes the sale of his or her personal information. Contains provisions concerning deadlines for processing a consumer's disclosure request; categories of personal information that must be disclosed; notice requirements; consumer information that is not subject to the Act's requirements; civil penalties for violations of the Act; and other matters. Amends the State Finance Act. Creates the Consumer Privacy Fund. Effective January 1, 2021.