Description

Introduced House Bill 376 enacting data protection framework

The Ohio House Bill 376 is introduced to the Ohio House of Representatives. The Bill aims to establish an Ohio Personal Privacy Act, which introduces several rights for consumers concerning their personal data (Sec. 1355.03 et seq.). The regulation would apply to (i) businesses with $25 million or more gross revenue in Ohio, (ii) to businesses that control or process data of 100'000 or more consumers, or (iii) to businesses that derive over 50% of their gross revenue from the sale of personal data and process or control personal data of 25'000 or more consumers (Sec. 1344.02).

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2021-07-12
under deliberation

The Ohio House Bill 376 is introduced to the Ohio House of Representatives. The Bill aims to establ…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
User consent: Other requirement
User right to access personal data
User consent: Permit user opt-out
Regulator notification requirement
User right to deletion of personal data
Sanctions
TBR - Administrative
Regulated subjects
1
personal data (all forms): storage (any form)
Regulatory tool
User consent: Other requirement
User right to access personal data
User consent: Permit user opt-out
Regulator notification requirement
User right to deletion of personal data
Sanctions
TBR - Administrative
Regulated subjects
1
personal data (all forms): sale
Regulatory tool
User consent: Other requirement
User right to access personal data
User consent: Permit user opt-out
Regulator notification requirement
User right to deletion of personal data
Sanctions
TBR - Administrative
Regulated subjects
1
personal data (all forms): transfer (any destination)
Regulatory tool
User consent: Other requirement
User right to access personal data
User consent: Permit user opt-out
Regulator notification requirement
User right to deletion of personal data
Sanctions
TBR - Administrative
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): data collection

personal data (all forms): storage (any form)

personal data (all forms): sale

personal data (all forms): transfer (any destination)