OH HB376

Enacts the Ohio Personal Privacy Act establishing comprehensive privacy rights and protections for Ohio residents' personal data, requiring businesses meeting certain thresholds to comply with consumer privacy standards

Applies to businesses with annual revenues exceeding $25 million, controlling personal data of 100,000+ consumers, or deriving over 50% of revenue from personal data sales; exempts government entities, financial institutions, health care entities, and higher education institutions

Grants consumers rights to know what personal data is collected, access their data in portable format, correct inaccuracies, delete personal data, and opt out of data sales and targeted advertising

Requires businesses to provide clear privacy policies, implement data security safeguards, respond to consumer requests within 45 days, and obtain consent before making material changes to privacy practices

Grants the Ohio Attorney General exclusive enforcement authority with power to investigate violations, issue 30-day cure notices, seek civil penalties up to $5,000 per violation, and award consumers $100-$750 per violation (up to $2,250 if willful); takes effect one year after enactment