SB546

Establishes consumer rights for data privacy, outlines compliance requirements, and sets penalties for violations.

Establishes consumer rights for data privacy, including the right to confirm, access, correct, and delete personal data. Requires controllers to provide privacy notices and establish secure methods for consumers to submit requests. Mandates data protection assessments for certain processing activities and outlines duties for controllers and processors. Prohibits certain contractual provisions and requires controllers to respond to consumer requests within 45 days.