MS SB2786

Third parties with access to personal, business, financial, operational, or intellectual property data from state agencies do not own that data unless the state agency and data provider explicitly agree otherwise

Third parties that collect or maintain data on behalf of state agencies must accept liability for any data breaches

Third parties must limit their use of state agency data strictly to the purposes specified in their contract with the agency

Third parties are prohibited from mining, selling, or releasing data obtained from or maintained for state agencies

Effective immediately upon passage