This bill requires government agencies to annually report the collection, use, and disclosure of personal identifying information by the agency. The report is required to include a list of personal identifying information collected, used, or disclosed; description of the statutory authority under which the information was collected; description of how the information was used by the government agency; list of other entities with which the information was shared; list of each misuse of or improper disclosure of information; actions taken to notify individuals whose information was disclosed; actions taken to prevent the future misuse or improper disclosure of the information. 

The report is to be delivered to the state auditor. The state auditor will be required to post the report on its website and list government agencies that failed to comply with the Act.