This bill establishes new regulations for government entities in Wyoming regarding the collection, access, security, and use of personal data. It introduces definitions for key terms such as "deidentified data," "government entity," "personal data," and "personal digital identity." The bill mandates that government entities must adopt and enforce policies that align with these definitions and comply with applicable federal and state laws. Additionally, it prohibits government entities from purchasing, selling, trading, or transferring personal data without the express written consent of the individual, with certain exceptions for inter-governmental transfers and compliance with existing privacy laws.

Furthermore, the bill outlines the rights of Wyoming residents concerning their personal data, allowing them to request copies of their data and file objections regarding its accuracy or handling. Government entities are required to investigate these objections and respond within thirty days. The legislation also sets limits on the collection and retention of personal data, stipulating that it should only be maintained for a specific purpose and not longer than three years without justification. The bill includes a timeline for the implementation of these policies, with various deadlines for state agencies, counties, cities, and other political subdivisions to adopt necessary procedures by 2028.