HB5221

CONSUMER DATA PRIVACY ACT

Introduced·2/5/26
Introduced Text

Creates the Consumer Data Privacy Act. Sets forth provisions concerning agreements between personal data processors and controllers. Provides for consumer personal data rights, including the right to opt out of the processing of personal data concerning the consumer for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of automated decisions that produce legal effects. Sets forth provisions concerning the responsibilities of controllers; requirements for small businesses; and data privacy and protection assessments. Provides for civil penalties. Preempts home rule. Amends the Freedom of Information Act to make a conforming change. Effective January 1, 2027.

See what it does, who it affects, and the critical issues in plain language. Free, 30 seconds.

Where it stands

Current
Rules Committee
Next
Committee decision

Sponsors

D
1
0
Democratic CaucusRepublican Caucus

Calendar

Mar 26

10:00 AM

House Cybersecurity, Data Analytics, & IT Committee Hearing

Mar 20

10:00 AM

House Cybersecurity, Data Analytics, & IT Committee Hearing

History

Mar 27

House

Rule 19(a) / Re-referred to Rules Committee

Mar 4

House

Assigned to Cybersecurity, Data Analytics, & IT Committee

Feb 10

House

First Reading