Bill 24-0451 for the Uniform Personal Data Protection Act of 2021 was referred, on 2 November 2021, to the Committee on Judiciary and Public Safety. The bill is based on the Uniform Personal Data Protection Act, which was adopted by the National Conference of Commissioners on Uniform State Laws in July 2021. The bill would address personal data privacy by establishing information practice principles to the collection and use of personal data from consumers by businesses. More specifically, the bill would, among other things: apply fair information practice principles to the collection and use of consumers' personal data by businesses; permit, without consent, compatible data practices that
News
District of Columbia: Bill for Uniform Personal Data Protection Act of 2021 referred to Committee on Judiciary and Public Safety
January 13, 2022
Summary
Bill 24-0451, the Uniform Personal Data Protection Act of 2021, was referred to the District of Columbia's Committee on Judiciary and Public Safety on November 2, 2021. Originating from the National Conference of Commissioners on Uniform State Laws in July 2021, the bill aims to regulate personal data privacy by implementing fair information practice principles for businesses collecting and using consumer data. It allows certain data practices without consent if they align with user expectations or benefit users, requires consent for practices that could be harmful, and prohibits practices posing substantial risks. Additionally, the bill grants data subjects rights to access, correct, or amend their data, mandates controllers to have a data privacy policy, and necessitates security risk assessments by controllers and processors.