The proposed bill establishes comprehensive rights for individuals regarding their personal data, including their name, image, likeness, and digital identity. It mandates that any entity processing personal data must adhere to these rights unless overridden by other state or federal laws. Key rights outlined in the bill include the ability to opt out of targeted advertising, access personal data, correct inaccuracies, delete data, and obtain data in a portable format. Additionally, the bill requires that data controllers respond to requests within a specified timeframe and allows authorized agents to act on behalf of individuals.

Furthermore, the bill amends existing laws related to violations involving older persons and persons with disabilities, as well as the commercial use of a natural person's name, image, or likeness. It categorizes violations of personal data rights as deceptive trade practices under the Wyoming Consumer Protection Act, thereby expanding the scope of unlawful practices. The bill also introduces civil penalties for violations, including restitution for victims and penalties recoverable by the attorney general. It grants investigative powers to the enforcing authority, allowing for the administration of oaths, subpoenaing witnesses, and collecting evidence. The attorney general is responsible for creating necessary implementation rules, with the act set to take effect on July 1, 2025.

Statutes affected:
25LSO-0089 v0.5: 40-12-102, 40-12-105