On November 9, 2023, Bill No. 0659 to establish the personal data privacy act (the bill) was introduced to the Senate and thereafter referred, on the same day, to the Committee on Finance, Insurance, and Consumer Protection.

What are the main provisions of the bill?

In particular, the bill aims to fulfill the following;

• require certain persons to provide certain notices to consumers regarding the collection, processing, sale, sharing, and retention of personal data;
• prohibit certain acts and practices concerning the collection, processing, sale, sharing, and retention of personal data;
• establish standards and practices regarding the collection, processing, sale, sharing, and retention of personal data;
• require the registration of data brokers;
• provide for the powers and duties of certain state governmental officers and entities;
• create certain funds; and
• provide remedies.

Additionally, the bill applies to businesses that conduct services that are targeted to residents in Michigan or businesses that control or process personal data of at least 100,000 consumers or of at least 25,000 consumers and derive any revenue from the sale of personal data.

Finally, it mandates the controller to ensure the privacy rights of consumers, such as the right to lawful processing with their consent, the right to revocation, and the right to deletion.

You can read the bill here and track its progress here.