SB 619

Abstract

Permits consumers to obtain from controller that processes consumer personal data confirmation as to whether controller is processing consumer's personal data and categories of personal data controller is processing, list of specific third parties to which controller has disclosed consumer's personal data or any personal data and copy of all of consumer's personal data that controller has processed or is processing. Permits consumer to require controller to correct inaccuracies in personal data about consumer, require controller to delete personal data about consumer or opt out from controller's processing of consumer's personal data under certain circumstances. Requires controller to provide to consumers reasonably accessible, clear and meaningful privacy notice that lists categories of personal data controller processes, describes controller's purpose for processing personal data, describes how consumer may exercise consumer's rights with respect to personal data, lists categories of personal data that controller shares with third parties, lists all categories of third parties with which controller shares personal data and provides other information. Specifies duties of, and prohibits specified actions of, controller and of processor that acts at controller's direction. Permits Attorney General to investigate violations of Act and to bring action to seek civil penalty of not more than $7,500 for each violation.