Summary

Beginning July 1, 2027, state agencies must make a privacy annotation for each record series containing personal data. A privacy annotation describes what personal data is contained within a record series, why the personal data is included, and a citation to the legal authority for processing the personal data. If a state agency has not completed a privacy annotation for a record series by July 1, 2027, the  state agency may not collect, maintain, or use the personal data in the record series.