Showing 11–14 of 14
bills
All technology bills
AB 378 requires all state agencies to mask or anonymize personally identifiable information (PII) before sharing it with the federal government, directly affecting state agencies handling sensitive data like health records or social services. The bill allows limited exceptions for sharing unmasked data when required by law, for legislative constituent services, or for court operations. It also creates a civil lawsuit option for individuals harmed by negligent violations, allowing recovery of actual damages, up to $1,000 in punitive damages, and attorney fees. The law aims to strengthen data privacy protections by limiting federal access to identifiable state records without explicit safeguards.
AB 172 creates a new consumer data protection law by defining key terms like "personal data," "biometric data," "sale of personal data," and "consumer" in section 100.80 of the statutes. This bill directly affects businesses that collect or process personal data of state residents, requiring them to follow standardized handling practices for such data. The law includes penalty provisions for violations, though specific penalty amounts and enforcement details are not provided in the available bill text.
SB 166 creates a new legal framework for consumer data protection by defining key terms like "personal data," "consent," "biometric data," and "dark patterns" in Wisconsin law. It directly affects businesses that collect personal data from Wisconsin residents (defined as individuals acting in personal, not commercial, contexts) by establishing standards for how they must handle such data. The bill’s key mechanism is setting clear definitions - such as requiring explicit consent for data processing, banning "dark patterns" that trick users, and excluding deidentified data or public records from coverage - to enable future enforcement. It does not yet impose new restrictions or penalties but provides the foundational definitions needed for implementing data protection rules.
AB 667 prohibits law enforcement agencies from paying third parties or government entities for access to an individual's personal data without a warrant. The bill defines "personal data" broadly to include names, location, financial records, health information, browsing history, and device identifiers. It allows exceptions only when a warrant is obtained, during emergencies involving immediate danger, if data is already public, or with the individual's explicit consent. This law directly affects law enforcement agencies and data-sharing companies by restricting how personal information can be acquired for investigations.
