HB 2043: Consumer Data Protection Act; user-generated content protected, civil penalty.

Official summary

Abstract published by the legislature (via Open States). Text as published by the legislature; reproduced verbatim.

Consumer Data Protection Act; user-generated content protected; civil penalty. Requires controllers and processors to provide consumers with a privacy notice that applies to the consumers' user-generated content, defined in the bill, under the Consumer Data Protection Act and requires that any secondary use, defined in the bill, of personal data or user-generated content be consented to by the consumer. The bill requires a controller or processor, upon request by a consumer, to provide such consumer with a report that describes how the consumer's personal data or user-generated content was processed over the prior 12 months. The bill increases from $7,500 to $15,000 the maximum civil penalties for violations and allows civil penalties of up to $22,500 per violation for repeated noncompliance or egregious violations. The bill also allows a consumer who suffers a loss due to a violation to bring a private right of action against a controller or processor.

Sponsors

Sponsors by party (alphabetical): Democratic 1

“Support” is shown only as formal sponsorship recorded by the legislature. Roll-call votes are available on the official bill page.

Recent official actions

1. February 4, 2025Left in Communications, Technology and Innovation
2. January 27, 2025Subcommittee recommends laying on the table (10-Y 0-N)
3. January 23, 2025Assigned CT & I sub: Communications
4. January 15, 2025Fiscal Impact Statement from Department of Planning and Budget (HB2043)
5. January 7, 2025Referred to Committee on Communications, Technology and Innovation
6. January 7, 2025Prefiled and ordered printed; Offered 01-13-2025 25102628D