SB 252

Abstract

Consumer Data Protection Act; controller privacynotice; cookies; consumer consent. Requires the privacy noticethat a controller must provide to consumers to include a method bywhich a consumer may opt out of the automatic placement of a datafile, commonly referred to as a "cookie," on the consumer's computeror web browser and a disclosure of the purposes for which the datafiles are used. The bill prohibits controllers from using cookies,except those that are strictly necessary, without the prior expressconsent of the consumer and prohibits controllers from preventingaccess to their services if such consent is not granted. The billalso requires controllers to document and store proof of such consent and make available an easily accessible method by which consumersmay withdraw such consent.