Landmark data privacy bill passes through Pennsylvania House

19 March 2024- Rep. Stephenie Scialabba (R-Butler) announced that a bill she authored with Rep. Ed Neilson, giving Pennsylvanians the ability to control how their personal data is used and sold passed the House on Monday.

“This was a big initiative of mine when I came to the House. I am very pleased to see House Bill 1201 finally pass the House of Representatives,” said Scialabba. “Drawing on my experience as a data privacy attorney, I am ecstatic to bring Pennsylvania’s privacy laws into the 21st century. We should not be falling behind other states in this regard. This bill will provide Pennsylvanians with much-needed, commonsense and long-overdue privacy rights over their personal data. House Bill 1201 will benefit all Pennsylvanians, and I look forward to the work ahead with the Senate to get this across the governor’s desk.”

“It was great to work in a bipartisan manner with Rep. Scialabba to pass House Bill 1201. House Bill 1201 is framework legislation that will protect Pennsylvanians and would not have come together without Rep. Scialabba’s expertise in data privacy,” stated House Transportation Chairman Ed Neilson (D-Philadelphia). “In a bipartisan manner, we were able to pass the legislation. The vote was quite convincing and passed overwhelmingly.”

Under the bill, for-profit businesses that operate in Pennsylvania, control personal information and either generate more than $10 million in annual revenue or derive at least 50% of annual revenue from selling consumer information would be subject to this legislation.

Under the legislation, consumers have the right to:

  • Know whether a business is processing the consumer’s personal data.
  • Correct inaccuracies in their personal data.
  • Delete personal data.
  • Opt out of having their personal data shared for the following reasons:
    • Targeted advertising.
    • Sale of personal data.
    • Profiling in furtherance of solely automated decisions that produce legal or similar effects concerning the consumer.

Once a consumer makes a request regarding their information, the employer must respond no later than 45 days after it was made. The Attorney General would be responsible for ensuring compliance with consumer requests.

House Bill 1201 moves to the Senate for consideration.