Creating a data broker registry.
What changed between versions
The effective date for mandatory registration was delayed from January 1, 2027, to May 1, 2028.
The definition of 'data broker' was updated to exclude entities that collect data from customers, subscribers, employees, investors, donors, or individuals in similar relationships.
New exemptions were added for entities providing government records, publishing media or educational works, and developing e-commerce services or software.
The exemption for publicly available information was expanded to include information made available by the resident individual themselves.
A new requirement was added stating that registration expires one year after the issuance date.
The penalty for failing to register now includes a condition that fines begin accruing only after the data broker receives notice of the violation from the department.
The bill title was updated from 'House Bill' to 'Substitute House Bill' and the bill number was changed from H-2897.1 to H-3439.1.