OH HB801

State agencies prohibited from collecting private information beyond what is necessary to perform their functions, and banned from collecting citizenship or immigration status data unless required by state or federal law

State agencies cannot disclose private information for purposes unconnected to agency program administration; entities receiving shared data must agree not to share it further and face liability for misuse

Private information may only be shared with individual consent, a judge-signed warrant, lawful court order, or subpoena; suspicious requests must be referred to the Attorney General for review

State agencies required to publicly post all active information-sharing agreements on their websites, including the type of data shared, receiving entity, and stated purpose

Individuals harmed by violations may recover $100-$750 per violation depending on the type, plus an additional $1,000 per violation for intentional or willful disregard, as well as actual damages