Establishing a data broker registry; defining "data broker" as a business that knowingly collects and sells or licenses personal consumer data to third parties with whom the consumer does not have a direct relationship; requiring certain data brokers to register each year with the Office of the Attorney General; requiring a data broker to report certain material changes to the Office of the Attorney General; and requiring the Office of the Attorney General to establish a certain publicly accessible, searchable database.