An Arizona bill relating to personal data (HB 2865) was reintroduced on February 11, 2021 in the Arizona House of Representatives and passed its second reading on February 15, 2021.
Key provisions:
- Carve out for employee and B2B data.
- Uses both “personal data” and “personal information” terms.
- “Sale” requires monetary consideration. A sale is presumed if there is an exchange of personal data and if contract terms with the third party do not limit the use of personal information by the third party.
- Definition of sensitive information includes precise geolocation.
- Consumer rights including: right to know; disclosure of copies of personal information held; notice at collection; correction of inaccurate information; deletion (without undue delay); restriction of processing if consumer contests accuracy of the data; processing is unlawful, controller no longer needs the personal data or the consumer’s interests outweigh the controller’s legitimate grounds; data portability; objection to processing of personal data for purposes of targeted advertising.
- Third party obligation to respect requests for objection to processing.
- Enforcement by AG.
Read the full text of the bill.
[View source.]
