Wisconsin Data Privacy and Protection Act (2023 Assembly Bill 957)

Proposed comprehensive privacy legislation modeled after the California Consumer Privacy Act. Would apply to businesses processing Wisconsin residents' personal data that meet specific thresholds. Requires businesses to provide detailed privacy notices, honor consumer rights requests, and maintain reasonable security practices. Includes provisions for data minimization, purpose limitation, and explicit consent for sensitive data processing. Proposes enforcement through Department of Justice with penalties up to $7,500 per intentional violation.

JurisdictionWisconsin
CategoryPrivacy & Data Protection
StatusActive
Latest development

Analysis

I apologize, but I do not have enough verified information to provide a comprehensive analysis of the Wisconsin Data Privacy and Protection Act (2023 Assembly Bill 957) with the level of detail and sourcing you requested. This bill appears to be a proposed piece of legislation that has not yet been enacted into law. As such, there are limited official sources available to cite for many of the sections you outlined.

Based on the search results provided, I can share a few key points about the proposed legislation:

  • It would create new consumer rights related to personal data and impose obligations on certain businesses that process Wisconsin residents' data
  • The bill text indicates it would be enforced by the Wisconsin Attorney General with potential penalties up to $7,500 per violation
  • As proposed legislation that has not been enacted, there are not yet official implementation guides, recent updates, or comprehensive analyses of industry impact available from authoritative sources

To provide the detailed analysis you requested with proper sourcing, I would need access to the full text of the proposed legislation and official materials from Wisconsin regulatory bodies. Without those, I cannot confidently make claims about specific requirements, compliance challenges, best practices, etc.

If you would like factual information about existing enacted privacy laws that may be similar to this proposed Wisconsin bill, such as the California Consumer Privacy Act, I would be happy to provide an analysis of those with proper sourcing. Let me know if you would like me to focus on an existing enacted law instead.

Recent developments

  • — Overview of the **Wisconsin Data Privacy Bill (WDPB)**, describing consumer rights, controller/processor obligations, enforcement by the Attorney General with penalties up to $7,500 per violation, and alignment with comprehensive state privacy regimes; highlights that the bill is not yet in effect and is part of Wisconsin’s effort to enact AB 466 / related privacy legislation.[7] (source)
  • — Analysis of Wisconsin’s move away from the earlier **Wisconsin Data Privacy and Protection Act (AB 957)** toward the newer **Wisconsin Data Privacy Act (AB 466)**, noting AB 466’s closer alignment with Virginia/Colorado/Connecticut-style laws, similar thresholds (100,000 consumers or 25,000 with >50% revenue from data sales), and an effective date of January 1, 2025 if enacted.[6] (source)
  • — Industry commentary explaining AB 957’s Virginia-model structure, consumer rights (access, correction, deletion, opt-out of sale/targeted advertising), and broad exemptions, while noting that AB 957 stalled in the Senate and that attention has shifted to AB 466/WDPB as the likely vehicle for Wisconsin’s comprehensive privacy regime.[4] (source)
  • — Retrospective policy update detailing AB 957’s passage in the Wisconsin Assembly, its key features (no private right of action, AG-only enforcement with 30‑day cure, penalties up to $7,500 per violation, COPPA and financial affiliates exemptions), and explaining that subsequent legislative activity and newer bills such as AB 466 have effectively superseded AB 957 as the primary focus.[1] (source)
  • — Legal blog review of AB 957’s Assembly passage and its major limitations (no universal opt-out signal recognition, permanent right-to-cure, no rulemaking authority), noting that the bill did not advance in the Senate and that Wisconsin’s comprehensive privacy push has continued through newer proposals (AB 466/WDPB), affecting expectations for businesses operating in the state.[2] (source)
  • — Detailed breakdown of AB 957’s structure and amendments—such as reducing free disclosures to once per year, expanding exemptions for financial affiliates and COPPA‑covered data—and discussion of how later policy developments and new bills have changed the legislative landscape, signaling that AB 957 is unlikely to be the operative privacy framework.[5] (source)
  • — Wisconsin Legislative Council memo comparing AB 957/AB 466 with other state privacy laws, emphasizing their consumer thresholds (100,000 consumers or 25,000 with >50% revenue from data sales), scope, and exemptions, and indicating that policy attention has moved toward AB 466-type frameworks rather than finalizing AB 957.[3] (source)
  • — Update on **industry reactions** to AB 466/WDPB, noting that businesses generally welcome alignment with established Virginia/Colorado/Connecticut models (for operational consistency) but express concern about compliance costs for mid‑sized controllers meeting the 100,000/25,000‑consumer thresholds and the lack of a revenue floor, which could impact a broad range of general-industry firms.[6] (source)
  • — Privacy-tech sector commentary on anticipated **impacts** of Wisconsin’s comprehensive privacy proposals (AB 957 and AB 466/WDPB), including expected demand for data-mapping, consent management, and rights-request tooling, and noting that organizations are largely preparing against AB 466/WDPB’s structure given AB 957’s stalled status.[7] (source)
  • — Industry analysis summarizing why AB 957 is viewed as a precursor rather than the final Wisconsin privacy regime, highlighting its Virginia-style rights and exemptions and explaining that general-industry stakeholders now focus compliance planning on AB 466/WDPB while monitoring whether any elements of AB 957 are carried into future legislative compromises.[4] (source)

Related regulations

Put it into practice

Browse all regulations · Compliance deadlines · Latest updates