This bill, known as the Hawaii Social Media Data Deletion Act, requires large social media platforms to give users clear and effective ways to permanently delete their accounts and all associated personal data. It applies to platforms with at least one million monthly active users nationwide or those generating $25 million or more in annual revenue. The law mandates that these companies remove all stored information, including sensitive details like browsing history and biometric data, when a user requests account termination. Additionally, the act prohibits deceptive practices that might prevent users from successfully deleting their accounts or their data.
Prohibits operators of smart household security devices from sharing user data with law enforcement agencies unless the user consents, the law enforcement agency obtains a judicial warrant, or there is an emergency situation involving a clear and present danger of imminent death or great bodily harm. Prohibits operators from requiring users to consent to the sharing of data with law enforcement agencies as a condition of using a smart household security device. Allows the Department of the Attorney General to bring a civil action against operators who violate certain requirements. (CD1)
Requires every government agency that maintains, uses, collects or processes the home address of a covered public servant or candidate, to ensure that their home address is not publicly accessible. Requires every government agency to redact or otherwise remove home addresses from certain websites, databases, and printed documents or publications. Authorizes an individual to request disclosure of the home address, under certain circumstances. Allows a covered public servant or candidate to object to the disclosure of their home address.
Prohibits government entities from making personal information publicly accessible through a publicly accessible information system or publicly accessible source of information, except under certain conditions. Allows individuals who reasonably believe their personal information is publicly accessible through a government entity's publicly accessible information system or publicly accessible source of information to submit a written notice to the entity to require corrective action. Establishes a cause of action to compel compliance. Establishes statutory penalties for intentional noncompliance. Requires government entities to adopt and implement policies and procedures to prevent personal information from being publicly accessible. Requires government entities that own, license, maintain, use, collect, or possess personal information to implement and maintain certain reasonable security procedures and practices to protect the personal information. Requires government entities to provide notice to individuals in the case of a breach of a security system protecting personal information. Requires government entities to submit an annual report to the Legislature. Effective 1/1/2525. (SD1)
Adds definitions of "identifier" and "specified data element" and amends the definition of "personal information" for the purposes of notifying affected persons of data and security breaches under the State's data breach notification law. Includes telecommunications carriers subject to and in compliance with certain federal provisions among the businesses deemed compliant with this law. Effective 7/1/3000. (HD1)
Requires original smartphone manufacturers to make documentation, parts, and tools available to independent repair providers and owners for the purposes of diagnosis, maintenance, and repair on fair and reasonable terms.
Protects minors from addictive content by imposing special requirements for operators regarding consent, notifications, and age verification. Protects minors from having their online personal data processed without parental consent.
Beginning 10/1/2026, prohibits digital financial asset transaction kiosks from allowing any two customers from conducting transactions with the same digital financial asset wallet address and requires operators to provide full refunds under certain circumstances.
Subjects hosts of digital financial asset transaction kiosks to civil penalties for acts of fraud committed through the use of the digital financial asset transaction kiosk located on the host's premises. Applies to contracts to host digital financial asset transaction kiosks that are entered into on or after the effective date of this Act. Beginning 7/1/2027, applies to contracts to host digital financial asset transaction kiosks that are in effect as of the day before the effective date of this Act.
Designates pricing practices based on surveillance data as unfair or deceptive acts or practices and unfair methods of competition in the conduct of any trade or commerce.
