Unofficial Status of HF2917

Short Description: Controllers required to provide, correct, or restrict personal data processing upon consumer request; controllers required to provide privacy notice and document risk assessment; liability and civil penalties provided; and attorney general provided with enforcement authority.