This bill mandates that all government entities in Wyoming adopt comprehensive policies regarding the collection, access, security, and use of personal data. It establishes definitions for key terms such as "de-identified data," "personal data," and "government entity," while explicitly excluding the judiciary and law enforcement agencies from its scope. The bill outlines specific requirements for data collection, including that entities must not collect more personal data than necessary, must obtain express written consent for any data transactions, and must not retain personal data for longer than three years without justification. Additionally, it grants Wyoming residents the right to request their personal data and to file objections regarding its accuracy or retention.

The bill also stipulates that government entities must implement the necessary policies and procedures to comply with these requirements by October 1, 2024, and it will take effect on July 1, 2024. It emphasizes the importance of protecting personal data and ensuring that residents have control over their information, while also providing a framework for addressing objections to data management practices.