This bill prohibits the sale of sensitive personal data, with exceptions for law enforcement, public health, research, legal obligations, and other permitted purposes. Penalties for violations include fines and enforcement by the Ohio Attorney General.
If you handle sensitive personal data in Ohio, you must ensure compliance with this bill or face penalties.
What do these statuses mean? ▼
Affected Industries
What This Means
Ohio's HB 807 seeks to protect sensitive personal data by prohibiting its sale for profit, except under conditions like law enforcement, public health, research, and other permitted purposes. Penalties for non-compliance are enforced by the Ohio Attorney General.
Key Provisions
- Prohibits selling sensitive personal data, defined as data revealing racial or ethnic origin, health information, genetic data, biometric data, financial information, and more, for profit, with exceptions for specified purposes.
- Applies to both government and private entities.
- Amends sections 1347.01, 1347.10, 1347.99, and 1347.072 of the Ohio Revised Code.
- Penalties for violations include fines, and enforcement involves the Ohio Attorney General.
Latest Legislative Action
Referred to committee
Bill Sponsors (showing 5 of 18)
| Name | Role |
|---|---|
| Christine Cockley | Primary |
| Tristan Rader | Primary |
| Anita Somani | Cosponsor |
| Ashley Bryant Bailey | Cosponsor |
| Beryl Piccolantonio | Cosponsor |
Compliance Checklist
Who: All entities handling sensitive personal data.
Penalty: Potential fines or legal action.
Full Legal Analysis
Official Source
Affected Industries
More Ohio AI Legislation
More Ohio AI Laws
Browse all published AI bills and regulations for Ohio.