Modeled after the European General Data Protection Regulation (GDPR), the Wisconsin Data Privacy Act includes three bills that work together to regulate what data a company may collect on an individual, when the company may collect it, how the company may use it, to whom the company may give it, and how long the company may retain it. The first bill – AB 870 – requires a controller to provide a customer with specific information at the time the controller collects personal data from the individual, while the second bill – AB 871 – seeks to require controllers to delete personal data they maintain upon request by any consumer. And finally, the third bill – AB 872 – imposes requirements on any controller to process a consumer’s personal data. If enacted as proposed, the Wisconsin Data Privacy Act would take effect on July 31, 2022.
