This bill, known as the Hawaii Social Media Data Deletion Act, requires large social media platforms to give users clear and effective ways to permanently delete their accounts and all associated personal data. It applies to platforms with at least one million monthly active users nationwide or those generating $25 million or more in annual revenue. The law mandates that these companies remove all stored information, including sensitive details like browsing history and biometric data, when a user requests account termination. Additionally, the act prohibits deceptive practices that might prevent users from successfully deleting their accounts or their data.
Requires every government agency that maintains, uses, collects or processes the home address of a covered public servant or candidate, to ensure that their home address is not publicly accessible. Requires every government agency to redact or otherwise remove home addresses from certain websites, databases, and printed documents or publications. Authorizes an individual to request disclosure of the home address, under certain circumstances. Allows a covered public servant or candidate to object to the disclosure of their home address.
Prohibits government entities from making personal information publicly accessible through a publicly accessible information system or publicly accessible source of information, except under certain conditions. Allows individuals who reasonably believe their personal information is publicly accessible through a government entity's publicly accessible information system or publicly accessible source of information to submit a written notice to the entity to require corrective action. Establishes a cause of action to compel compliance. Establishes statutory penalties for intentional noncompliance. Requires government entities to adopt and implement policies and procedures to prevent personal information from being publicly accessible. Requires government entities that own, license, maintain, use, collect, or possess personal information to implement and maintain certain reasonable security procedures and practices to protect the personal information. Requires government entities to provide notice to individuals in the case of a breach of a security system protecting personal information. Requires government entities to submit an annual report to the Legislature. Effective 1/1/2525. (SD1)
Adds definitions of "identifier" and "specified data element" and amends the definition of "personal information" for the purposes of notifying affected persons of data and security breaches under the State's data breach notification law. Includes telecommunications carriers subject to and in compliance with certain federal provisions among the businesses deemed compliant with this law. Effective 7/1/3000. (HD1)
Requires original smartphone manufacturers to make documentation, parts, and tools available to independent repair providers and owners for the purposes of diagnosis, maintenance, and repair on fair and reasonable terms.
Requires the Office of Enterprise Technology Services to coordinate the development and maintenance of statewide standards for the collection, management, and reporting of race and ethnicity demographic data by any state or county department, agency, board, or commission. Focuses the use of collected demographic data on areas of public interest and establishes transparency and accountability requirements regarding artificial intelligence systems associated with the collected data. Requires state and county departments, agencies, boards, and commissions that collect race and ethnicity data to report to the Office of Enterprise Technology Services on meeting federal data collection requirements. Appropriates funds.
By January 1, 2027, requires each law enforcement agency operating in the State to maintain a publicly available policy on the visible identification of law enforcement officers. Adds law enforcement officers to covered public servants who may request any government agency, person, or organization to not make publicly available on the Internet certain covered personal information.
Protects minors from addictive content by imposing special requirements for operators regarding consent, notifications, and age verification. Protects minors from having their online personal data processed without parental consent.
SB 1038 clarifies privacy definitions by adding a specific term for "specified data element" and broadening the definition of "personal information." This bill directly affects businesses, organizations, and government entities that collect or handle personal data, as it changes how such data must be categorized. The key change is updating these definitions to include more specific data types, which would impact how entities comply with privacy requirements. The bill is scheduled to take effect on July 1, 3000, after passing committee review with amendments.
Prohibits the sale of geolocation information and internet browser information without consent. Prohibits the sale of data collected through eavesdropping or through an application operating in the background of a device that uses the device's microphone.
