HB 5221

Creates the Consumer Data Privacy Act. Sets forth provisions concerning agreements between personal data processors and controllers. Provides for consumer personal data rights, including the right to opt out of the processing of personal data concerning the consumer for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of automated decisions that produce legal effects. Sets forth provisions concerning the responsibilities of controllers; requirements for small businesses; and data privacy and protection assessments. Provides for civil penalties. Preempts home rule. Amends the Freedom of Information Act to make a conforming change. Effective January 1, 2027.