Assembly Bill 378 aims to enhance the protection of personally identifiable information (PII) in Wisconsin by prohibiting state agencies from sharing such data with the federal government unless it has been masked or anonymized. The bill defines "personally identifiable information" and outlines the entities considered state agencies, which include the legislature and the courts. However, it allows for exceptions where unmasked data can be shared if necessary to comply with state or federal law, or to fulfill official duties related to constituent relations or court responsibilities.

Additionally, the bill establishes a civil cause of action for individuals who are harmed by negligent violations of this data-sharing prohibition. Those found liable for such violations would be required to pay actual damages, exemplary damages up to $1,000, and cover reasonable attorney fees for the injured party. This legislation seeks to ensure that personal data is adequately protected while still allowing for necessary governmental functions to be carried out.