The proposed House bill (which has backing by the Republican governor) provides for data subject rights including access, portability and rectification, and the opt-out of the sale or sharing of consumer information. It also sets forth civil penalties (if not cured within 30 days of notification of a violation), and allows for a limited right of private action.