Requires small businesses, as defined by the United States Small Business Administration, to receive consent from consumers before selling consumers’ sensitive data;*

Why carve out exceptions.....

Requires consent before a company is allowed to sell biometric data. I can’t believe that’s legal at all.