Protects minors from addictive content by imposing special requirements for operators regarding consent, notifications, and age verification. Protects minors from having their online personal data processed without parental consent.
Establishes consumer protection requirements for the use of artificial intelligence systems in consumer interactions and consequential decisions, including disclosures, documentation, and a right to correction, appeal, and human review. Makes certain violations an unfair or deceptive act or practice. Requires risk management and impact assessments for high-risk artificial intelligence systems. Requires incident reports to the Executive Director of the Office of Consumer Protection and the Attorney General.
Establishes a framework to regulate controllers and processors with access to personal consumer data. Establishes penalties. Establishes the Consumer Privacy Special Fund to be administered by the Department of the Attorney General. Appropriates funds.
Requires certain social media platforms to provide an accessible mechanism for users to delete their accounts on the platform and permanently erase all personal information and sensitive personal information associated with deleted accounts. Prohibits certain deceptive practices by social media platforms that obstruct the deletion of user accounts. Authorizes the Attorney General to pursue civil actions and seek injunctive relief and penalties for violations. Effective 7/1/2027. (CD2)
Prohibits surveillance pricing, or differential pricing based on information collected with electronic surveillance technology. Deems surveillance pricing an unfair and deceptive practice. Provides certain exemptions.
Requires operators of digital asset kiosks to have requisite licenses or registrations; make annual reports to the Department of Commerce and Consumer Affairs; limit transaction amounts for new consumers; provide disclosures, receipts, and customer service contact information to all consumers; and cooperate with the Department of Commerce and Consumer Affairs and applicable law enforcement agencies in the investigation of fraudulent transactions. Authorizes the Department of Commerce and Consumer Affairs to investigate and take enforcement actions against operators. Extends joint liability to businesses or establishments wherein digital asset kiosks are located that are determined to have processed a fraudulent transaction or a transaction for which an operator is found to be liable.
Establishes the Hawaii Drop and Delete Act to limit the information data brokers collect and sell regarding consumer information. Establishes a deletion mechanism allowing consumers to request data brokers to drop their personal information. Establishes the consumer privacy fund. Establishes a private right of action.
Beginning 1/1/2027, requires a developer of an algorithmic decision system to provide certain disclosures to a deployer and an individual who is or will be affected by a decision made, informed, or influenced by the algorithmic decision system. Provides certain rights and procedures for individuals to access and correct data used by an algorithmic decision system. Requires disclosure requirements for generative artificial intelligence systems. Provides that a developer and deployer of an algorithmic decision system are jointly and severally liable for a violation of any law that results from the deployer's use of the developer's system, under certain conditions. Assigns enforcement responsibilities to the attorney general, including establishing rules.
