HB 2729 Summary

• Establishes consumer rights to access, correct, delete, and restrict processing of personal data held by large businesses collecting or selling consumer information in Arizona.

• Requires controllers (entities collecting data) to notify consumers when personal data is sold to data brokers, provide copies of personal data upon request, and inform consumers of data collection purposes at or before collection.

• Grants consumers the right to object to processing of personal data for targeted advertising and requires controllers to communicate deletion or correction requests to third-party recipients who received the data.

• Applies to legal entities with annual gross revenue of at least $25 million that either control data of 100,000+ consumers or derive over 35% of revenue from selling personal information of 25,000+ consumers.

• Authorizes the Attorney General to enforce violations with civil penalties up to $2,500 per violation or $7,500 per intentional violation; establishes a consumer privacy fund from collected penalties; explicitly provides no private right of action for consumers.