WeVote
Log In

Bill

Bill

HB 214

CONSUMER INFORMATION AND DATA PROTECTION ACT

2026 Regular Session Introduced by Rebecca Dow and 4 co-sponsors

HB 214 establishes New Mexico consumer data protection standards requiring businesses to safeguard personal information with enforcement provisions and potential penalties for violations.

action postponed indefinitely
#business&industry
0
WeVote Research Nonpartisan
Bill Summary · HB 214

Legislative bill overview

HB 214 would establish comprehensive data protection and consumer privacy requirements for businesses operating in New Mexico. The bill creates standards for how companies collect, use, store, and share personal consumer information, while establishing enforcement mechanisms and potential penalties for violations.

Why is this important

Data breaches and unauthorized use of personal information affect millions of New Mexicans annually, often without meaningful recourse. This bill would create enforceable privacy rights similar to laws already implemented in other states, potentially reducing identity theft, fraud, and exploitation while giving consumers more control over their personal data.

Potential points of contention

  • Business compliance costs: Small businesses may face significant expenses implementing new data security infrastructure and compliance systems, potentially disadvantaging smaller operators compared to larger corporations with existing privacy frameworks
  • Scope and definitional issues: Disagreement likely over what constitutes "personal information," which businesses are covered, and what exemptions apply (financial institutions, healthcare providers, government agencies) could limit the bill's effectiveness
  • Enforcement and liability: Questions remain about whether enforcement falls to state attorney general, private lawsuits, or both; excessive liability could expose businesses to frivolous claims while insufficient enforcement would weaken protections
  • Federal preemption concerns: Uncertainty about how state law interacts with existing federal privacy regulations (HIPAA, FCRA, etc.) could create conflicting requirements

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.