Relating to: prohibiting the state from sharing data with the federal government that contains personally identifiable information if the data is not first masked or otherwise anonymized and authorizing a civil cause of action for negligent violations of that prohibition. (FE)

SB 369 prohibits state agencies from sharing personally identifiable information (PII) with the federal government unless the data is first masked or made anonymous. It directly affects state agencies (like departments, courts, and commissions), requiring them to anonymize PII before federal data sharing, except for limited exceptions like complying with other laws or carrying out official duties. The bill also creates a civil lawsuit option for individuals harmed by negligent violations, allowing claims for actual damages, up to $1,000 in punitive damages, and attorney fees. This law aims to strengthen data privacy protections for residents by limiting how state data can be shared federally.