This bill establishes regulations to protect customers' global positioning system (GPS) data by prohibiting commercial mobile service providers and mobile application developers from disclosing such data to third parties without the customer's explicit consent. To obtain this consent, developers must present a clear notice to customers, requiring them to affirmatively agree to allow their location data to be shared. The bill also stipulates that third parties accessing this data cannot sell it and may only disclose it as necessary to fulfill the purpose for which consent was granted.

Additionally, the bill outlines that providers and developers are exempt from obtaining consent when disclosure is mandated by federal or state law, law enforcement investigations, or court orders. Violations of these provisions would be classified as unlawful practices under the state's consumer fraud act, potentially resulting in penalties of up to $10,000 for the first offense and $20,000 for subsequent offenses. The Director of the Division of Consumer Affairs is tasked with creating necessary rules and regulations to implement the bill's objectives.