Technology (Data Privacy)

Wyoming's SF 20 requires state and local government entities (excluding law enforcement and judicial branches) to adopt policies governing how they collect, secure, and use residents' personal data. The bill prohibits selling or transferring personal data without explicit consent, allows limited transfers to other government entities or contracted service providers (with data protection requirements), and mandates that residents can request copies of their data or challenge inaccuracies within 60 days. It defines key terms like "personal data" (information linked to identifiable individuals) and "deidentified data" (data that cannot be traced back to a person), while clarifying that existing laws like HIPAA and public records access remain unaffected. This bill directly affects all Wyoming government agencies handling resident data and establishes new transparency and privacy standards for their operations.