An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.

This bill establishes a consumer data privacy framework that defines the responsibilities of data controllers and processors while setting penalties for non-compliance. It clarifies that controllers are entities that determine how personal information is used and requires them to implement reasonable safeguards to protect collected data. The legislation specifies that publicly available information and certain mathematical representations of data are excluded from the definition of personal information, and it includes exemptions for financial institutions. Additionally, the bill outlines procedures for consumers to opt out of data processing and grants them a 60-day window to correct errors in their data requests.