All Roll Calls
Yes: 490 • No: 0
Sponsored By: Daniel Zolnikov (Republican)
Became Law
Personalized for You
Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
5 provisions identified: 3 benefits, 1 costs, 1 mixed.
You can ask a company if it uses your personal data and get a copy. You can correct, delete, or get a portable copy of your data, and opt out of targeted ads, sale, and profiling with legal effects. The company must answer within 45 days and may extend once by up to 45 more days if it tells you within the first 45 days. You get one free response every 12 months; companies may charge or refuse requests that are unfounded, excessive, infeasible, or repetitive. Companies may require authentication for requests, but not for opt-outs, and they must offer an appeal process with a decision in 60 days. In responses, they must not disclose sensitive IDs like Social Security numbers, driver’s license numbers, account numbers, passwords, or biometrics.
Many groups are outside these state privacy rules. Examples include state and local agencies, certain nonprofits, colleges and universities, banks and credit unions under GLBA, HIPAA‑covered health entities and records, insurers, and FERPA education records. Some federally regulated data like credit reporting and driver data are also exempt. People using those services have narrower state‑level privacy protections.
Consent must be a clear, informed, and active choice. Dark patterns and passive actions do not count. The law defines targeted ads as ads built from your activity across non‑affiliated sites or apps; contextual ads and first‑party ads are not targeted ads. It defines a “sale” of data and excludes several transfers, like sharing with processors or affiliates, legal or security disclosures, and mergers—so opt‑outs do not cover those. Sensitive data includes race, religion, health, sexual life, citizenship status, genetic or biometric IDs, data about known children, and precise location. Precise location means within 1,750 feet. Companies holding de‑identified data must keep it unlinked, publicly commit to use it only in de‑identified form, and bind recipients to the same rules.
The law defines key K‑12 data terms so schools and app operators know what pupil data is protected. Protected information includes identifiable details a pupil or parent provides when using K‑12 online apps, plus pupil records and pupil‑generated content. If a company follows federal COPPA rules for verifiable parental consent, it also meets this state’s parental consent standard.
The law covers companies with data on 25,000 or more consumers. It also covers companies with data on 15,000 or more consumers if over 25% of their revenue comes from selling data. Data used only to finish a payment does not count toward these totals.
Daniel Zolnikov
Republican • Senate
There are no cosponsors for this bill.
All Roll Calls
Yes: 490 • No: 0
Senate vote • 4/15/2025
Do Pass
Yes: 50 • No: 0
Senate vote • 4/14/2025
Do Pass
Yes: 49 • No: 0
Senate vote • 4/11/2025
Do Concur
Yes: 99 • No: 0
Senate vote • 4/9/2025
AMD-SB0297.003.002 Zolnikov DO PASS
Yes: 96 • No: 0
Senate vote • 4/9/2025
Do Pass As Amended
Yes: 97 • No: 0
Senate vote • 2/24/2025
Do Pass
Yes: 49 • No: 0
Senate vote • 2/21/2025
Do Pass
Yes: 50 • No: 0
Chapter Number Assigned
Signed by Governor
Transmitted to Governor
Signed by Speaker
Signed by President
Returned from Enrolling
Sent to Enrolling
3rd Reading Passed as Amended by House
2nd Reading House Amendments Concurred
Returned to Senate with Amendments
3rd Reading Concurred
2nd Reading Concurred as Amended
2nd Reading Motion to Amend Carried
Committee Report--Bill Concurred as Amended
Committee Executive Action--Bill Concurred as Amended
Hearing
First Reading
Referred to Committee
Transmitted to House
3rd Reading Passed
2nd Reading Passed
Committee Report--Bill Passed as Amended
Committee Executive Action--Bill Passed as Amended
Hearing
Referred to Committee
Enrolled
4/15/2025
As Amended (Version 4)
4/9/2025
As Amended (Version 3)
3/27/2025
As Amended (Version 2)
2/19/2025
Introduced
2/11/2025