Prohibits the sale of geolocation information and internet browser information without consent. Prohibits the sale of data collected through eavesdropping or through an application operating in the background of a device that uses the device's microphone. Establishes exemptions for lawful investigations conducted by law enforcement agencies, customer proprietary network information, and certain telecommunication carriers. Effective 1/1/2077. (SD2)
Prohibits government entities from making personal information publicly accessible through a publicly accessible information system or publicly accessible source of information, except under certain conditions. Allows individuals who reasonably believe their personal information is publicly accessible through a government entity's publicly accessible information system or publicly accessible source of information to submit a written notice to the entity to require corrective action. Establishes a cause of action to compel compliance. Establishes statutory penalties for intentional noncompliance. Requires government entities to adopt and implement policies and procedures to prevent personal information from being publicly accessible. Requires government entities that own, license, maintain, use, collect, or possess personal information to implement and maintain certain reasonable security procedures and practices to protect the personal information. Requires government entities to provide notice to individuals in the case of a breach of a security system protecting personal information. Requires government entities to submit an annual report to the Legislature. Effective 1/1/2525. (SD1)
Requires health care providers using artificial intelligence (AI) in patient interactions to disclose to the patient that the patient is interacting with artificial intelligence. Requires health care providers using AI in making consequential decisions relating to the patient to provide certain notice and statements to the patient; maintain a qualified AI oversight personnel who shall be a natural person that reviews, evaluates, and validates or overrides AI outputs; monitor and conduct regular performance evaluations of their AI systems; implement procedures to address identified deficiencies; and maintain certain records. Requires the Department of Health to adopt rules. Implementation effective 7/1/2028. Effective 1/30/2050. (SD1)
Establishes and appropriates funds to establish the Aloha Intelligence Institute within the University of Hawaii to develop, support, and advance artificial intelligence initiatives statewide. Requires reports to the Legislature. Effective 7/31/2050. (SD1)
SB 1038 clarifies privacy definitions by adding a specific term for "specified data element" and broadening the definition of "personal information." This bill directly affects businesses, organizations, and government entities that collect or handle personal data, as it changes how such data must be categorized. The key change is updating these definitions to include more specific data types, which would impact how entities comply with privacy requirements. The bill is scheduled to take effect on July 1, 3000, after passing committee review with amendments.
Enhances sharing of critical infrastructure information between infrastructure owners and operators and the state government. Defines and protects "critical infrastructure information" that is crucial for direct support of the security and resilience of the State. Provides homeland security partners with reassurance that their proprietary information provided to the state government will be protected from disclosure. Effective 7/1/2077. (SD2)
Beginning 1/1/2027, requires all state agencies to make the full text of their rules available on the website of the Office of the Lieutenant Governor in a digitally accessible and searchable format that meets or exceeds certain federal standards. Effective 1/1/2525. (SD1)
Requires the Comptroller and State Librarian to identify state office buildings, including state libraries, that can provide equitable telecommunication access to allow certain residents, including residents with disabilities, to participate remotely in legislative hearings and estimate the costs and resources, including additional staffing, to effectuate this purpose. Allows the Comptroller and State Librarian to partner with the University of Hawaii in performing these tasks. Requires a report to the Legislature. Effective 1/1/2525. (SD1)