This bill aims to regulate the use of customer data by broadband internet access service providers in South Dakota. It introduces several new definitions, including "aggregate customer personal information dataset," "broadband internet access service," and "customer personal information," which encompasses various types of sensitive data such as financial information, health information, and personal identifiers. The bill mandates that service providers must obtain "opt-in consent" from customers before using, disclosing, selling, or allowing access to their personal information. Additionally, it requires service providers to implement clear and accessible mechanisms for customers to manage their consent and prohibits any discrimination against customers who choose not to provide consent.
Furthermore, the bill outlines specific circumstances under which service providers can use customer personal information without consent, such as for service provision, legal compliance, and emergency response. It also establishes requirements for data retention, mandates reasonable security measures to protect customer information, and obligates service providers to notify customers about their data practices and any material changes to those practices. The legislation emphasizes the importance of customer rights regarding their personal information and aims to enhance transparency and accountability in the handling of customer data by broadband service providers.