House Bill 708 for An Act providing for protection of certain personal data of consumers; imposing duties on controllers and processors of personal data of consumers; providing for enforcement; prescribing penalties; and establishing the Consumer Privacy Fund was introduced, on 27 March 2023, to the Pennsylvania House of Representative, and thereafter referred, on the same date, to the Committee on Commerce. In particular, the bill would apply to persons that conduct business in Pennsylvania or produce goods, products, or services that are sold or offered for sale to Pennsylvania residents and that:

• during a calendar year, control or process personal data of at least 100,000 consumers; or
• control or process personal data of at least 25,000 consumers and derive over 50% of gross revenue from the sale of personal data.

In addition, the bill would regulate, among other things, the exercise of consumers' rights, including the right to:

• confirm whether or not the controller is processing their personal data and to access the same;
• correct inaccuracies in their personal data;
• delete personal data provided by the consumer or obtained by the controller about the same;
• obtain a copy of the personal data; and
• opt-out of the processing of the personal data for the purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

Moreover, if passed, the bill would take into effect on 1 January 2024, or in 18 months, whichever is later.

You can read the bill here and track its progress here.