AB957,24,6 (9) Violations. (a) The attorney general shall have exclusive authority to enforce violations of this section.

AB957,24,13 (b) 1. Prior to initiating any action under this section, the attorney general shall provide a controller or processor 30 days' written notice identifying the specific provisions of this section the attorney general, on behalf of a consumer, alleges have been or are being violated. If within the 30 days the controller or processor cures the noticed violation and provides the attorney general an express written statement that the alleged violations have been cured and that no further violations shall occur, no action for statutory damages shall be initiated against the controller or processor.

AB957,24,17 2. If a controller or processor continues to violate this section in breach of an express written statement provided to the consumer under this section, the attorney general may initiate an action and seek damages for up to $7,500 for each violation under this section.

AB957,24,19 (c) Nothing in this section shall be construed as providing the basis for, or be subject to, a private right of action to violations of this section or under any other law.

AB957,25,4 (10) Enforcement. (a) The attorney general retains exclusive authority to enforce this section by bringing an action in the name of the state, or on behalf of persons residing in the state. The attorney general may issue a civil investigative demand to any controller or processor believed to be engaged in, or about to engage in, any violation of this section, and by the civil investigative demand the attorney general may compel the attendance of any officers or agents of the controller or processor, examine the officers or agents of the controller or processor under oath, require the production of any books or papers that the attorney general deems relevant or material to the inquiry, and issue written interrogatories to be answered by the officers or agents of the controller or processor.

AB957,25,6 (b) Any controller or processor that violates this section is subject to an injunction and liable for a forfeiture of not more than $7,500 for each violation.

AB957,25,9 (c) Notwithstanding s. 814.04 (1), the attorney general may recover reasonable expenses incurred in investigating and preparing the case, including attorney fees, of any action initiated under this section.

AB957,25,11 (11) Local preemption. No city, village, town, or county may enact or enforce an ordinance that regulates the collection, processing, or sale of personal data.

AB957,2 Section 2. Effective date.

AB957,25,13 (1) This act takes effect on January 1, 2024.

AB957,25,14 (End)