Wisconsin Data Privacy Act (SB 670)
The Wisconsin Data Privacy Act (SB 670), introduced in 2024, proposes consumer data privacy protections for Wisconsin residents. Modelled after the Virginia CDPA, it would apply to controllers that process data of 100,000+ consumers or 25,000+ consumers while deriving 50%+ revenue from data sales. Includes standard consumer rights, sensitive data protections, and AG enforcement. Wisconsin continues legislative efforts toward comprehensive privacy legislation.
Wisconsin Data Privacy Act (SB 670) is a compliance framework from United States — Wisconsin with 11 domains and 24 controls. The largest domains are Consumer Rights (7 controls), Controller Duties (3 controls), Sensitive and Children Data (3 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (11)
Consumer Rights
Consumer Rights
| Code | Title |
|---|---|
| WI-DPA-APP.2 | Appeals process for denied rights requests |
| WI-DPA-NDR.1 | Non-discrimination for exercising rights |
| WI-DPA-RTS.1 | Consumer right to access personal data |
| WI-DPA-RTS.2 | Consumer right to correct inaccurate personal data |
| WI-DPA-RTS.3 | Consumer right to delete personal data |
| WI-DPA-RTS.4 | Consumer right to data portability |
| WI-DPA-RTS.5 | Right to opt out of sale, targeted advertising, and profiling |
Controller Duties
Controller Duties
| Code | Title |
|---|---|
| WI-DPA-DAR.1 | De-identified data safeguards |
| WI-DPA-PUR.1 | Purpose limitation and data minimisation |
| WI-DPA-SEC.1 | Reasonable administrative, technical, and physical security |
Enforcement
| Code | Title |
|---|---|
| WIPRIVACY-4 | Enforcement |
Governance and Enforcement
Governance and Enforcement
| Code | Title |
|---|---|
| WI-DPA-ENF.1 | Attorney General enforcement and cure period |
| WI-DPA-REC.1 | Programme governance and accountability |
Notice and Transparency
Notice and Transparency
| Code | Title |
|---|---|
| WI-DPA-NOT.1 | Privacy notice content and accessibility |
Processors and Assessments
Processors and Assessments
| Code | Title |
|---|---|
| WI-DPA-CON.2 | Processor contractual obligations |
| WI-DPA-DPA.1 | Data protection assessments for higher-risk processing |
Rights
| Code | Title |
|---|---|
| WIPRIVACY-2 | Consumer Rights |
Scope
| Code | Title |
|---|---|
| WIPRIVACY-1 | Scope and Applicability |
Scope and Applicability
Scope and Applicability
| Code | Title |
|---|---|
| WI-DPA-APP.1 | Applicability threshold determination |
| WI-DPA-PUB.1 | Public-interest, research, and exempt processing |
Sensitive
| Code | Title |
|---|---|
| WIPRIVACY-3 | Sensitive Data and DPIA |
Sensitive and Children Data
Sensitive and Children Data
| Code | Title |
|---|---|
| WI-DPA-CHI.1 | Processing of children's personal data |
| WI-DPA-CON.1 | Opt-in consent for processing of sensitive data |
| WI-DPA-DEF.1 | Identification of sensitive personal data |
What is Wisconsin Data Privacy Act (SB 670) and who does it apply to?
Wisconsin Data Privacy Act (SB 670) is a compliance framework from United States — Wisconsin with 11 domains and 24 controls. The Wisconsin Data Privacy Act (SB 670), introduced in 2024, proposes consumer data privacy protections for Wisconsin residents. Modelled after the Virginia CDPA, it would apply to controllers that process data of 100,000+ consumers or 25,000+ consumers while deriving 50%+ revenue from data sales. Includes standard consumer rights, sensitive data protections, and AG enforcement. Wisconsin continues legislative efforts toward comprehensive privacy legislation. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Wisconsin Data Privacy Act (SB 670) actually require?
Wisconsin Data Privacy Act (SB 670) has 24 controls organised across 11 domains. The largest domains are Consumer Rights (7 controls), Controller Duties (3 controls), Sensitive and Children Data (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Wisconsin Data Privacy Act (SB 670) do I already cover?
Wisconsin Data Privacy Act (SB 670) does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement Wisconsin Data Privacy Act (SB 670)?
Start your Wisconsin Data Privacy Act (SB 670) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Wisconsin Data Privacy Act (SB 670) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 24 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.
Get Started Free →Free forever — no credit card required