MS HB1051

Applies to businesses with over $25 million in revenue that either process personal information of at least 175,000 Mississippi consumers annually, or process data of 25,000+ consumers while deriving more than 50% of gross revenue from selling personal information

Grants consumers the right to access, correct, delete, and obtain portable copies of their personal information, as well as opt out of data sales, targeted advertising, and profiling that produces legal or significant effects

Requires controllers to respond to consumer requests within 45 days (extendable by another 45 days), provide clear privacy notices disclosing data categories and processing purposes, and establish a free appeals process for denied requests

Exempts financial institutions subject to Gramm-Leach-Bliley Act, HIPAA-covered entities, insurers, nonprofits, government agencies, air carriers, public utilities not selling data, and colleges/universities not selling data

Enforcement authority rests exclusively with the Attorney General, who may issue civil investigative demands and pursue civil penalties for violations; the Walker Montgomery Protecting Children Online Act takes precedence in case of conflicts