H 1754

As introduced: - Creates the personal right to protection of personal data and to enjoy the free movement of data. Requires personal data to be processed lawfully, transparently, collected only for specific purposes, limited to what is necessary, to be kept accurate, retained no longer than necessary, and processed in a secure manner. - Requires consent to process personal data except in certain cases. Prohibits processing revealing certain sensitive data without consent except in certain cases. - Requires disclosure to consumers about collection and processing. - Creates a right to access, right to correct, right to delete, right to limit how data is used, right to data portability, and right to opt out of processing data for profiling or marketing. - Creates a right not to be subject to a decision based solely on automated processing without an opportunity for human review. - Requires certain security measures. Requires notice to the attorney general within 72 hours of a data break. Requires data protection impact assessments. Requires appointment of a Data Protection Officer. - Limits transfer of data to a foreign destination.