personal data collection; business; requirements

SB 1790 requires businesses that collect personal data from multiple sources (data brokers) to follow specific rules when handling sensitive information like biometrics, health details, genetic data, precise location tracking, and financial information. It prohibits selling or sharing sensitive data without explicit consent and mandates businesses to verify a child's age (under 16) before collecting their data. The law defines "sensitive data" broadly, including government IDs, health records, and private communications, while exempting deidentified data and publicly available information. It applies to any business collecting data linked to Arizona residents, creating new requirements for transparency and consent.