SB 2779 Summary

• Establishes the "Mississippi Consumer Data Privacy Act" to protect consumer personal data and grant consumers rights to know what information businesses collect, request deletion of their data, and opt out of personal information sales.

• Applies to for-profit businesses doing business in Mississippi that meet at least one threshold: annual gross revenues exceeding $10,000,000, annually process personal information of 50,000+ consumers/households/devices, or derive 50% or more of annual revenues from selling personal information.

• Requires businesses to disclose collected personal information categories, sources, and purposes within 45 days of verifiable consumer requests, and provide a "Do Not Sell My Personal Information" link on websites where consumers can opt out.

• Prohibits businesses from discriminating against consumers who exercise privacy rights, though businesses may charge different prices if reasonably related to the value of consumer data; minors under 16 require opt-in consent before data sales.

• Allows consumers to sue for statutory damages of $100-$750 per incident for unauthorized access/disclosure resulting from inadequate security; authorizes Attorney General to seek civil penalties up to $7,500 per violation; takes effect July 1, 2025.