HB78

Providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.

Chamber Passed·10/1/25

Pennsylvania HB78 establishes consumer data privacy rights and duties for controllers and processors.

Pennsylvania HB78, known as the Consumer Data Privacy Act, outlines specific rights for consumers regarding their personal data. Consumers can confirm, correct, delete, and opt out of the sale of their personal data. Controllers must provide clear privacy notices, establish secure means for exercising rights, and conduct data protection assessments. Processors must assist controllers in compliance and adhere to controller instructions. The act exempts certain entities and data types, such as protected health information and public records.

Included in complete analysis

  • Overview
  • Core Provisions
  • Implementation
  • Impact
  • Legal Framework
  • Critical Issues

See what it does, who it affects, and the critical issues in plain language. Free, 30 seconds.

Where it stands

Last
Passed the House · 7–4 · Oct 1, 2025
Current
The Senate
Next
Senate floor vote

Sponsors

DDDDDDDDDDDDDDDDDD
18
8
RRRRRRRR
Democratic CaucusRepublican Caucus

Roll Call Votes

11 Yea

RRDDRRRRDDR

0 Nay

Calendar

Jun 24

10:30 AM

Communications & Technology (s) Hearing

Jun 10

9:00 AM

Communications & Technology (s) Hearing

History

Jun 25

Senate

Second consideration

Jun 24

Senate

Re-reported as amended

Jun 24

Senate

First consideration