The bill establishes new regulations for government entities in Wyoming regarding the collection, access, security, and use of personal data. It introduces definitions for key terms such as "deidentified data," "government entity," "personal data," and "personal digital identity." The legislation mandates that government entities must adopt policies that limit the collection and retention of personal data to what is necessary for their lawful functions, and they cannot maintain personal data for longer than three years without a justified policy. Additionally, it requires that no personal data can be sold or transferred without the express written consent of the individual, and residents have the right to request access to their personal data.

Furthermore, the bill outlines a process for residents to object to inaccuracies or issues regarding their personal data held by government entities, which must be addressed within thirty days. It also sets deadlines for the implementation of these policies, with state agencies required to adopt necessary procedures by July 1, 2025, and other political subdivisions by July 1, 2027. The effective dates for different sections of the bill vary, with some provisions taking effect immediately upon passage, while others are set for future dates.