The Ohio Privacy Act, proposed in House Bill No. 2025-2026, aims to enhance the protection of personal data collected by state agencies. It establishes new definitions for "deidentified data" and "private information," and mandates that state agencies only collect private information necessary for their functions. The bill prohibits the collection of private information related to an individual's citizenship or immigration status unless required by law. Furthermore, it restricts the disclosure of private information to purposes directly connected with the agency's programs and requires entities receiving such information to adhere to strict usage and sharing agreements.

Additionally, the bill outlines circumstances under which state agencies may share private information, including obtaining consent from individuals or complying with legal orders. It also provides individuals with a cause of action for violations of the act, specifying monetary penalties for different types of violations. The intent of the legislation is to safeguard the privacy of Ohio residents and prevent government overreach in the handling of personal information.