SB 3015: PERSONAL INFORMATION; GOVERNMENT ENTITIES; PUBLICLY ACCESSIBLE INFORMATION SYSTEMS; PUBLICATION CONTROLS; DATA SECURITY; NOTIFICATION; CAUSE OF ACTION; REPORTS
- Session Year: 2025-2026
- House: Senate
- Latest Version Date: 2026-02-19
Current Status:
In Progress
(2026-02-20: Report adopted; Passed Second Reading, as amended (SD 1) and referred to JDC.)
Introduced
In Committee
First Chamber
In Committee
Second Chamber
Final Decking
Enacted
Prohibits government entities from making personal information publicly accessible through a publicly accessible information system or publicly accessible source of information, except under certain conditions. Allows individuals who reasonably believe their personal information is publicly accessible through a government entity's publicly accessible information system or publicly accessible source of information to submit a written notice to the entity to require corrective action. Establishes a cause of action to compel compliance. Establishes statutory penalties for intentional noncompliance. Requires government entities to adopt and implement policies and procedures to prevent personal information from being publicly accessible. Requires government entities that own, license, maintain, use, collect, or possess personal information to implement and maintain certain reasonable security procedures and practices to protect the personal information. Requires government entities to provide notice to individuals in the case of a breach of a security system protecting personal information. Requires government entities to submit an annual report to the Legislature. Effective 1/1/2525. (SD1)
Discussed in Hearing