We update this post periodically when new bills are proposed, when bills die and when bills are passed into law.
We classified the bills into a chart to make it all easier to understand. Here is an explanation of the factors against which each bill is weighed:
Business size limit: this bill applies to businesses of a certain size. For example, some of the bills apply to businesses that make millions of dollars in revenue or collect the personal information of a certain number of that state’s citizens;
Right to access data: consumers have the right to see the specific pieces of data that the company has collected about them;
Right to delete data: consumers have the right to request that the business delete their personal data;
Right to correct data: consumers have the right to request that the business correct their incorrect data or complete their incomplete data;
Right to restrict processing: consumers have the right to limit how businesses use their data.
Right to opt out: consumers have the right to say no to the sharing or selling of their data.
Opt-in consent required: consumers have to affirmatively allow the business to collect, use, sell or share their data.
Right to portability: consumers have the right to receive their personal data that the business has collected on them in an electronic, commonly-used, machine structured format.
Against automated decision making: the bill restricts a businesses’ ability to make certain decisions by solely automated means, without any human involvement.
Imposes fiduciary duty: the bill obligates a business to act solely in the best interest of the consumer and not the business when it comes to that consumer’s data.
Prohibits discrimination: the bill prohibits businesses from discriminating against consumers that exercise their rights by charging higher prices or by providing inferior quality service or products.