Bill Summary: SB00134 - Consumer Privacy Act

• Effective January 1, 2021, establishes comprehensive consumer privacy rights requiring businesses meeting certain thresholds ($25M+ revenue, 50K+ consumer records, or 50%+ revenue from data sales) to disclose and delete personal information upon consumer request.

• Grants consumers the right to opt out of personal information sales, with special protections for minors under 16 (requiring parental consent for those under 13 and consumer consent for ages 13-16).

• Prohibits businesses from discriminating against consumers who exercise privacy rights, though allows price differences directly tied to data value and certain financial incentive programs.

• Establishes private right of action with statutory damages of $100-$750 per consumer per incident or actual damages (whichever is greater) for unauthorized access due to inadequate security, plus 30-day notice requirement allowing businesses to cure violations.

• Creates enforcement mechanism through Attorney General with civil penalties up to $7,500 per intentional violation, with 20% of penalties funding a "consumer privacy account" for state court and Attorney General costs.