INTERNET PRIVACY & SAFETY ACT

HB 307, the Internet Privacy & Safety Act, requires online service companies operating in New Mexico to limit how they collect, use, and share consumer data. It prohibits selling or sharing personal data without explicit consent, bans deceptive "dark patterns" that trick users into sharing data, and creates new rights for consumers to access or correct their information. The law specifically protects minors by restricting data collection based on age or children-focused features. It also prevents companies from denying service to users who exercise their privacy rights or from waiving those protections. The bill applies to for-profit entities offering online services to New Mexico residents, including those handling biometric data or using targeted advertising.