SB2612 - Mississippi Consumer Data Privacy Act

• Creates the "Mississippi Consumer Data Privacy Act" establishing consumer rights to know what personal information businesses collect, whether it is sold, and to request deletion and opt-out of sales.

• Applies to businesses with annual gross revenues exceeding $10 million, those handling personal information of 50,000+ consumers annually, or those deriving 50%+ of revenue from selling personal information.

• Requires businesses to respond to consumer requests within 45 days (extendable to 90 days), disclose personal information categories and sources, and provide a "Do Not Sell My Personal Information" link on websites.

• Prohibits businesses from discriminating against consumers exercising privacy rights through denial of services, price discrimination, or reduced service quality, though price differences tied to data value are permitted.

• Allows consumers to sue for $100-$750 per incident in statutory damages for unauthorized access to personal information, and authorizes the Attorney General to enforce violations with civil penalties up to $7,500 per violation; effective July 1, 2022.