The bill amends sections 1347.01, 1347.10, and 1347.99 of the Revised Code and enacts section 1347.072, establishing stricter regulations on the sale of sensitive personal data by government and private entities. It defines "personal information" to include sensitive data and introduces a new definition for "sensitive data," which encompasses various personal identifiers such as names, social security numbers, and immigration status. The bill prohibits the sale or communication of sensitive data to data brokers or private entities for profit unless it is for a permitted use, with informed consent, or required by law.

Additionally, the bill outlines civil remedies for individuals harmed by violations of these provisions, allowing for the recovery of statutory and actual damages, as well as attorney's fees. It establishes penalties for violations of the new section 1347.072, classifying repeat offenders as felons, and allows for injunctions against individuals or agencies that violate the law. The existing sections 1347.01, 1347.10, and 1347.99 are repealed, streamlining the legal framework surrounding the protection of personal information.

Statutes affected:
As Introduced: 1347.01, 1347.10, 1347.99