SB 117 - Geolocation Information Protection Act

• Private persons cannot collect, use, store, or disclose geolocation information from location-based mobile applications without providing written notice and obtaining express consent from the individual.

• Required notice must be clear, prominent, and accurate; inform the individual of specific purposes for data collection; and provide a hyperlink or accessible means to view the collected geolocation information.

• Exemptions allow collection without notice or consent for: a person's own geolocation information, parents locating minor children, court-appointed guardians locating incapacitated persons, and emergency service providers.

• Violations constitute unfair or deceptive trade practices, and individuals may recover liquidated damages of $1,000 or actual damages (whichever is greater) plus other appropriate relief through civil action.

• Waivers of the law's provisions are void and unenforceable; the law does not apply to health care providers subject to HIPAA or financial institutions subject to the Gramm-Leach-Bliley Act.