SB 2508 allows mortgage originators working for licensed companies to perform loan origination work remotely (e.g., from home or other off-site locations) under specific security and supervision rules. It requires mortgage companies to implement strict safeguards, including secure digital connections (like encrypted VPNs), annual security audits, breach reporting within three business days, and compliance with federal privacy laws like the Gramm-Leach-Bliley Act. The bill defines "remote location" and clarifies that remote work must follow company policies, with originators’ NMLS records designating the company’s main office as their registered location. This directly affects mortgage companies and their originators in Mississippi by expanding work locations while maintaining data security standards.
HB 993 allows mortgage lenders and brokers in Mississippi to permit loan originators to process mortgage applications remotely (e.g., from home or other off-site locations) under specific security and supervision rules. The bill requires licensees to implement digital safeguards - including secure system access via encrypted networks, regular security audits, and protocols to protect customer data - to ensure compliance with privacy laws like the Gramm-Leach-Bliley Act. It directly affects mortgage brokers, lenders, and their originators by expanding where they can legally conduct business while mandating strict data security measures. The bill also updates definitions (like "remote location" and "branch") in Mississippi’s mortgage licensing law but does not change core licensing requirements beyond these remote-work provisions.
HB 1574 prohibits car dealers, manufacturers, and franchisors from sharing customers' contact details or personal information with other companies, except for specific business needs like completing a sale, processing warranties, or handling recalls. It directly affects car dealerships and manufacturers by restricting how they can use or share customer data they collect. The law allows sharing only for legitimate purposes such as validating incentives, evaluating dealer performance, or fulfilling safety obligations, but bans general marketing or data sales to third parties. This is a privacy-focused policy change targeting data practices in the automotive industry.
SB 2500, the Mississippi Consumer Data Protection Act, would have established state-level privacy rights for Mississippi residents by requiring businesses collecting personal data to provide clear privacy notices, allow consumers to access or delete their data, and implement security measures. It directly affects businesses operating in Mississippi that handle personal information, excluding healthcare data covered under HIPAA and de-identified information. Key provisions include mandating consumer requests be addressed promptly, requiring businesses to establish appeal processes for denied requests, and granting the Attorney General exclusive enforcement authority with civil penalties for violations. The bill died in committee on February 4, 2025, and did not become law.
SB 2796 creates a property right for every individual (living or deceased) in their name, photograph, voice, or likeness, prohibiting commercial use without consent. It directly affects anyone whose image or voice might be used for advertising, fundraising, or products without permission, including deceased individuals (with rights lasting 10 years post-death). Key provisions require prior consent for commercial exploitation, allow civil lawsuits for violations, and classify unauthorized use as a Class A misdemeanor. The law also specifies that using images of "definable groups" (like crowds at events) does not require individual consent, and courts can issue injunctions or seize violative materials.
HB 768, the "ELVIS Act," would establish that every individual has the right to control how their name, voice, image, or likeness is used commercially, including protection against unauthorized AI-generated deepfakes. It requires consent for using these elements in advertising, fundraising, or selling products, with specific rules for minors (parental consent) and deceased individuals (heirs' consent for 10 years). Violations could lead to civil lawsuits, misdemeanor penalties (up to 11 months in jail or $3,000 fine), and court orders to seize unauthorized materials like AI-generated content. The bill aims to prevent exploitation of personal identity through AI technology by creating enforceable legal protections.
SB 2779, the Mississippi Consumer Data Privacy Act, would give Mississippi consumers new rights regarding their personal data collected by businesses. It would allow consumers to request that businesses disclose what data they collect, delete that data, and opt out of having their data sold. Businesses meeting specific thresholds (like annual revenue over $10 million or handling data for 50,000+ consumers) would be required to comply with these requests and provide clear privacy notices. However, this bill died in committee on February 4, 2025, and did not become law.
