Technology (Consumer Data Protection)

SB 112, the Consumer Data Privacy Act, establishes new rules for how businesses handle personal data in Pennsylvania. It requires businesses (like online services or retailers meeting revenue or data volume thresholds) to get clear, affirmative consent from Pennsylvania residents before collecting or selling their data, bans deceptive "dark patterns" that trick users into sharing information, and prohibits selling data for targeted advertising without consent. The law defines personal data broadly to include location and biometric information (but excludes de-identified data or publicly available information) and imposes penalties for violations. It directly affects Pennsylvania consumers by giving them more control over their data and businesses that process their information.

HB 1779 requires businesses using algorithms to set prices (like online retailers or service platforms) to disclose how those algorithms work to consumers. It mandates the Pennsylvania Attorney General and Consumer Protection Bureau to develop rules for transparency and investigate unfair pricing practices. The bill directly affects companies that use dynamic or automated pricing models and aims to give consumers clearer insight into how prices are determined. This is a concrete policy change focused on disclosure, not on regulating specific prices or outcomes.

HB 1624 would require companies and service providers (like apps or websites) to obtain explicit permission before collecting or using people's location data. It directly affects digital services that track user movements, such as navigation apps or location-based advertisers. The law establishes penalties for violations, allows individuals to sue companies that break the rule, and gives the Attorney General authority to enforce it. Violations could result in fines, with the bill specifying these enforcement mechanisms.

HB 1857 requires businesses to disclose when they use artificial intelligence in specific consumer interactions, such as loan applications or medical consultations. It gives consumers the right to request a human review for decisions that significantly impact them, like denials of services or critical financial actions. The Attorney General would enforce these requirements, including potential penalties for noncompliance. This bill directly affects businesses using AI in consumer-facing services and empowers consumers with transparency and review options.

HB 1942 prohibits businesses from charging higher prices to consumers based on their data collection or surveillance practices. It directly affects consumers who might face discriminatory pricing and businesses that use tracking data to set prices. The bill requires companies to stop using surveillance data (like location or browsing history) to determine price differences, imposing fines for violations. This creates a clear policy change to prevent price discrimination tied to consumer data tracking.

HB 78 establishes rules for businesses handling consumer data, requiring them to be transparent about data collection, secure personal information, and allow consumers to access or delete their data. It directly affects companies that collect personal information (like names, addresses, or online activity) from residents of the state. Key provisions include mandating clear privacy notices, implementing security measures, and giving consumers control over their data. Violations would result in fines imposed by the state's consumer protection agency. The bill passed final passage in October 2025 and is now law.