MS SB2548

Creates the "Mississippi Consumer Data Privacy Act" establishing consumer rights to know what personal information businesses collect, whether it is sold, to delete personal information, and to opt out of sales.

Applies to businesses with annual gross revenues exceeding $10 million, or that annually buy/sell personal information of 50,000+ consumers, or derive 50%+ of annual revenues from selling personal information.

Requires businesses to disclose collected personal information within 45 days of a verifiable consumer request and prohibits discrimination against consumers who exercise their privacy rights.

Prohibits sale of personal information for consumers under 16 years old without affirmative consent (13-15 year-olds consent themselves, under 13 requires parental/guardian consent).

Allows consumers to sue for statutory damages of $100-$750 per incident or actual damages (whichever is greater) for unauthorized access resulting from inadequate security, and allows Attorney General to pursue civil penalties up to $7,500 per violation; takes effect July 1, 2021.