United States of America: Introduced Pennsylvania Consumer Data Protection Act (H.B. 2257)
Description
Introduced Pennsylvania Consumer Data Protection Act (H.B. 2257)
On 20 January 2022, the Pennsylvania Consumer Data Protection Act (H.B. 2257) was introduced and referred to the Committee on Consumer Affairs. The Bill introduces the rights to access, rectify, and delete personal data owned by a controller. Moreover, the Bill introduces the right to data portability and to opt-out from a controller's data processing related to targeted advertising, personal data sale or profiling activities having legal effects. Finally, the Bill requires every data controller to obtain the explicit consent of users when they process sensitive personal data and to adopt security measures to protect stored data.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Any
Economic activity
online advertising provider
Category
All
2
Type
Any
Economic activity
cross-cutting
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
User or public reporting requirement
Sanctions
Civil penalty
Regulated subjects
2
personal data (all forms): data processing
Regulatory tool
User consent: Permit user opt-out
Sanctions
Regulated subjects
1
Regulatory tool
User right to portability of personal data
User right to rectification of personal data
User right to access personal data
User right to deletion of personal data
Preventive security requirement
User or public reporting requirement
Sanctions
Civil penalty
Regulated subjects
2
personal data (all forms): storage (any form)
Regulatory tool
User right to portability of personal data
User right to rectification of personal data
User right to access personal data
User right to deletion of personal data
Preventive security requirement
User or public reporting requirement
Data storage/retention obligation
Sanctions
Civil penalty
Regulated subjects
2
personal data (all forms): sale
Regulatory tool
User or public reporting requirement
Sanctions
Civil penalty
Regulated subjects
2
Regulatory tool
User consent: Permit user opt-out
Sanctions
Regulated subjects
1