Privacy Law Status

Your Rights as a Pennsylvania Resident

Under the proposed Consumer Data Privacy Act, Pennsylvania residents would gain comprehensive rights over their personal information. Currently, these rights do not exist under Pennsylvania law, but if the pending legislation passes, residents would have:

• Right to know what data is collected – Businesses would be required to provide transparent information about what personal information they collect, how it’s used, and with whom it’s shared
• Right to delete personal information – You could request that companies delete your personal data, with some exceptions for legal compliance and legitimate business needs
• Right to opt out of data sales – Companies would be prohibited from selling your personal information without your explicit consent, and you could opt out of such sales
• Right to correct inaccurate data – You would be able to request corrections to incorrect personal information that companies maintain about you
• Right to non-discrimination – Businesses could not retaliate against you for exercising your privacy rights by denying services or charging different prices

The proposed law would also require businesses to obtain your consent before processing sensitive data, including biometric information, and would give you the right to opt out of automated decision-making and targeted advertising [3].

Business Requirements

The proposed Consumer Data Privacy Act would apply to for-profit businesses operating in Pennsylvania that meet specific thresholds, creating obligations for data handling and consumer protection:

• Coverage thresholds – Businesses with annual revenue of $10 million or more, those processing data of 50,000 or more consumers, or companies deriving 50% of revenue from data sales would need to comply [3]
• Transparency requirements – Companies would need to provide clear privacy notices describing data collection practices, purposes, and consumer rights
• Consumer request procedures – Businesses would be required to establish mechanisms for consumers to exercise their rights and respond to requests within specified timeframes
• Security and assessment obligations – Companies would need to conduct data protection assessments for high-risk processing activities and implement reasonable security measures [3]
• Consent requirements – Explicit consent would be required for processing sensitive data and for targeted advertising to minors under 16 [3]

Practical Impact

• Current protection gaps – Pennsylvania residents currently lack comprehensive privacy rights that exist in other states, relying mainly on federal laws and limited state protections like breach notification requirements [6]
• Limited enforcement options – Unlike some state privacy laws, the proposed Pennsylvania act would not create a private right of action, meaning individuals could not sue companies directly for violations [3]
• Attorney General enforcement – Violations would be enforceable only by the Pennsylvania Attorney General’s office, which would investigate complaints and impose penalties of up to $7,500 per violation [1]
• Existing legal alternatives – Some privacy advocates have used Pennsylvania’s Wiretapping and Electronic Surveillance Control Act (WESCA) to challenge certain online tracking practices, though this law was not designed for internet privacy issues [7]

Comparison Context

• Behind other states – Pennsylvania is among 47 states that lack strong consumer data privacy laws, while states like California, Colorado, Virginia, and Connecticut have comprehensive privacy protections in place [8]
• Lower business thresholds – The proposed Pennsylvania law would have a lower revenue threshold ($10 million) compared to many other state privacy laws, potentially covering more businesses [3]
• Similar consumer rights – The proposed rights would be comparable to those in other state privacy laws, including access, deletion, correction, and opt-out rights
• No private lawsuits – Like Virginia and several other states, Pennsylvania’s proposed law would not allow individual lawsuits, relying instead on government enforcement [9]

Action Steps for Residents

• Contact your legislators – Support or express concerns about pending privacy legislation by contacting your state representatives and senators about HB 78 and SB 112
• Stay informed about legislative progress – Monitor the status of privacy bills through the Pennsylvania General Assembly website and follow committee proceedings
• Use existing federal protections – Take advantage of current privacy tools like opting out of credit reporting agency data sharing and using privacy settings on social media platforms
• Practice good digital hygiene – Review privacy policies, use strong passwords, limit personal information sharing, and regularly review account settings on online services
• Report privacy concerns – File complaints with the Pennsylvania Attorney General’s Consumer Protection Bureau for potential privacy violations or scams [10]

Official Resources and Contact Information

Pennsylvania General Assembly

To track pending privacy legislation or contact lawmakers about privacy issues, use the official Pennsylvania General Assembly website at https://www.legis.state.pa.us/. You can search for current bills, view committee schedules, and find voting records on privacy-related legislation.

Find Your Representatives

Contact your specific state representative and senator using the legislature’s official tool at https://www.legis.state.pa.us/cfdocs/legis/home/findyourlegislator/. Enter your address to identify your legislators and access their contact information, including both Harrisburg and district office phone numbers and email addresses.

Pennsylvania Attorney General

For consumer protection issues and privacy-related complaints, contact the Pennsylvania Attorney General’s Bureau of Consumer Protection:

Phone: 1-800-441-2555
Website: https://www.attorneygeneral.gov/submit-a-complaint/scams-complaint/
Email: scams@attorneygeneral.gov

The Attorney General’s office handles consumer protection matters and would be the enforcement agency for any future comprehensive privacy law. They also provide resources for reporting scams and privacy violations.

Legislative Information

For questions about the legislative process or to request copies of bills, contact the House Document Room at 717-787-2372. You can also access bill text and status updates through the General Assembly’s online legislative database.

Public comment opportunities on privacy legislation typically occur during committee hearings. Committee schedules and meeting information are available on the General Assembly website, and many committees accept written testimony from citizens on pending legislation.

Sources and Citations

Last Updated August 2025. Written with contributions from both human authors and Perplexity AI. If you find incorrect or outdated information let us know at support@optery.com.