Enact the Ohio Privacy Act

1. **ONE-SENTENCE SUMMARY:** The Ohio Privacy Act aims to regulate how businesses provide personal data to out-of-state entities. 2. **KEY REQUIREMENTS:** - Obtain explicit consent from individuals before sharing their personal data with out-of-state companies. - Implement clear privacy policies that disclose data sharing practices. - Allow individuals to access, correct, and delete their personal data upon request. 3. **DEADLINES:** - Effective Date: The bill will take effect six months after it is signed into law. - Compliance Deadline: Businesses must be compliant with the new requirements by the effective date. 4. **PENALTIES:** - Non-compliance may result in fines up to $10,000 per violation. - Enforcement will be carried out by the Ohio Attorney General. 5. **SMB IMPACT:** Small businesses will need to update their data handling practices and privacy policies to comply with the new law, which may involve additional costs and administrative work. However, it can also enhance customer trust by demonstrating a commitment to data privacy.