RELATING TO PERSONAL INFORMATION.
What changed between versions
Added a detailed definition of 'personal information' including social security numbers, financial account numbers, medical records, biometric data, and genetic data.
Added a prohibition on government entities making personal information publicly accessible through websites or databases unless explicitly required by law.
Added a requirement for government entities to implement reasonable security procedures and practices to protect personal data.
Added a requirement for government entities to provide written notice to affected individuals in the event of a data breach.
Added a requirement for government entities to submit annual compliance reports to the legislature.
Removed the specific mechanism for redacting and requesting home addresses of public servants and candidates.
Added a new civil cause of action allowing individuals to sue for injunctive relief if their personal information is improperly disclosed, along with statutory damages for intentional violations.
Changed the effective date from immediate approval to January 1, 2525.