B26-0670 DC introduced

District of Columbia Government Data Privacy and Protection Act of 2026

privacy

Plain-English summary

1. **ONE-SENTENCE SUMMARY:** Bill 26-670 aims to create a Chief Privacy Officer to oversee privacy protections for personal data collected by District government agencies.

2. **KEY REQUIREMENTS:**
   - Businesses must comply with privacy protections regarding the collection, use, and sharing of personal data.
   - Ensure transparency in how personal data is handled and provide clear privacy notices to individuals.
   - Implement security measures to protect personal data from unauthorized access.

3. **DEADLINES:**
   - The bill is currently in the introduction stage; the effective date will be determined once passed.
   - Compliance deadlines will be outlined in the final legislation.

4. **PENALTIES:**
   - Non-compliance may result in fines and other enforcement actions, though specific amounts and mechanisms will be detailed in the final bill.

5. **SMB IMPACT:** Small businesses that handle personal data will need to adopt new privacy practices and may incur costs to ensure compliance, but they will also benefit from clearer guidelines on data protection.

Source description

As introduced, Bill 26-670 would establish a Chief Privacy Officer in the Office of the Chief Technology Officer. Among other things, it would establish comprehensive privacy protections governing the collection, use, and disclosure of covered individuals’ personal data by District government agencies.

Not legal advice. Summaries are generated by AI from publicly available bill text and may contain errors or omissions. Always consult counsel before making compliance decisions.