HF 36 Summary

• Applies to businesses with annual revenues exceeding $25,000,000, those buying/selling personal information of 50,000+ consumers annually, or deriving 50% or more of revenue from selling personal information.

• Grants consumers rights to access their personal information, opt out of information sales, and request deletion of personal information collected about them.

• Requires businesses to provide transparent notice at or before collection regarding categories of personal information collected, sources, business purposes, and where information may be disclosed or sold.

• Prohibits businesses from discriminating against consumers who exercise privacy rights, except for pricing differences reasonably related to the value of consumer data provided to the business.

• Creates private right of action allowing consumers to recover $100-$750 per violation (or actual damages, whichever is greater), investigation costs, attorney fees, and up to three times damages for willful violations; also authorizes attorney general enforcement.