The bill seeks to strengthen cybersecurity and consumer data privacy in West Virginia by introducing two new articles: the Safe Harbor for Cybersecurity Programs and the Consumer Data Protection Act. It provides businesses with an affirmative legal defense against punitive damages in data breach lawsuits, contingent upon maintaining a written cybersecurity program with specified safeguards. The bill also grants immunity to higher education institutions that offer cybersecurity assessment programs. Additionally, it establishes that no private cause of action is created under this article, thereby limiting the avenues for lawsuits related to cybersecurity failures.
The Consumer Data Protection Act outlines a comprehensive framework for the management of personal data, detailing the responsibilities of data controllers and processors, and granting consumers rights to access, correct, delete, and manage their personal data. It mandates that controllers respond to consumer requests within 45 days and provides for a transparent appeal process. The bill emphasizes the necessity of obtaining informed consent, particularly for children under 13, and requires data protection assessments to evaluate risks associated with data processing. The Attorney General is given exclusive enforcement authority, with the ability to impose civil penalties for non-compliance, and the legislation aims to create a uniform data protection framework across the state, effective July 1, 2026.
Statutes affected: Introduced Version: 31A-8H-1, 31A-8H-2, 31A-8H-3, 31A-8H-4, 31A-8H-5, 46A-6O-1, 46A-6O-2, 46A-6O-3, 46A-6O-4, 46A-6O-5, 46A-6O-6, 46A-6O-7, 46A-6O-8, 46A-6O-9, 46A-6O-10, 46A-6O-11, 46A-6O-12, 46A-6O-13
Committee Substitute: 31A-8H-1, 31A-8H-2, 31A-8H-3, 31A-8H-4, 31A-8H-5, 46A-6O-1, 46A-6O-2, 46A-6O-3, 46A-6O-4, 46A-6O-5, 46A-6O-6, 46A-6O-7, 46A-6O-8, 46A-6O-9, 46A-6O-10, 46A-6O-11
Engrossed Committee Substitute: 31A-8H-1, 31A-8H-2, 31A-8H-3, 31A-8H-4, 31A-8H-5, 46A-6O-1, 46A-6O-2, 46A-6O-3, 46A-6O-4, 46A-6O-5, 46A-6O-6, 46A-6O-7, 46A-6O-8, 46A-6O-9, 46A-6O-10, 46A-6O-11