Highlight any text to annotate

AN ACT relating to the administration of the government; requiring government entities to adopt policies for the collection, access, security and use of personal data as specified; requiring specific personal data policies; providing definitions; specifying applicability; and providing for effective dates. This act provides broadly applicable requirements for the handling of personal data within government entities, except for law enforcement and the judicial branch of government and specifies that to the extent that a provision of this act conflicts with another provision of state or federal law, the other provision shall control. This act prohibits government entities from purchasing, selling, trading, or transferring personal data except under certain express conditions or exceptions. This act requires government entities to adopt policies for the management of personal data and justify the retention of personal data beyond three (3) years. This act provides a process for a current or former Wyoming resident or the resident's legally authorized representative to request copies of their personal data and to file objections regarding the accuracy, completeness, pertinence, timeliness, relevance, retention, dissemination or denial of access to the personal data that is maintained by a state government entity. Comments: Section 2 of this act requiring government entities to adopt policies for the management of personal data has a delayed effective date of July 1, 2027.