Technology (Consumer Data Protection)

SB 166 creates a new legal framework for consumer data protection by defining key terms like "personal data," "consent," "biometric data," and "dark patterns" in Wisconsin law. It directly affects businesses that collect personal data from Wisconsin residents (defined as individuals acting in personal, not commercial, contexts) by establishing standards for how they must handle such data. The bill’s key mechanism is setting clear definitions - such as requiring explicit consent for data processing, banning "dark patterns" that trick users, and excluding deidentified data or public records from coverage - to enable future enforcement. It does not yet impose new restrictions or penalties but provides the foundational definitions needed for implementing data protection rules.

AB 667 prohibits law enforcement agencies from paying third parties or government entities for access to an individual's personal data without a warrant. The bill defines "personal data" broadly to include names, location, financial records, health information, browsing history, and device identifiers. It allows exceptions only when a warrant is obtained, during emergencies involving immediate danger, if data is already public, or with the individual's explicit consent. This law directly affects law enforcement agencies and data-sharing companies by restricting how personal information can be acquired for investigations.