SB 3180

As introduced: - Requires deployers of artificial intelligence to obtain express user consent before using their data for indefinite AI training or disclosing it to a third party. - Establishes a private right of action for users harmed by a violation, allowing for statutory damages of at least $1,000 for negligent violations and $5,000 for intentional violations. - Makes a violation of the act an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act, enforceable by the Attorney General.