Consumer protection, protection of personally identifiable information further provided for, civil and criminal liability established

HB 470 establishes the Government Information Privacy Protection Act to safeguard personally identifiable information (PII) held by state and federal agencies. It requires state agencies to obtain written consent from individuals and the state before sharing PII with federal agencies, mandates annual privacy training for state employees handling PII, and sets strict vendor requirements (including security ratings and prohibitions on unauthorized sharing). Violations could result in civil penalties up to $50,000 per incident for individuals or criminal penalties up to $500,000 for state employees in repeated violations. An independent Oversight Board will monitor compliance and report annually to the legislature, starting in 2026.