COMMUNITY PRIVACY & SAFETY ACT

SB 420, the "Community Privacy & Safety Act," requires online service providers operating in New Mexico to limit how they collect and use consumer data. It directly affects for-profit companies offering online features, products, or services to New Mexico residents, prohibiting them from using biometric data without consent, engaging in data brokerage without permission, or using deceptive "dark patterns" to manipulate user choices. Key provisions include giving consumers the right to opt out of data sharing, access their data, and prevent retaliation for exercising these rights. The law also bans companies from waiving these protections or denying service based on a consumer's privacy choices.