(a) Each unit of state and local government and each state agency that operates or maintains a website shall incorporate a machine-readable privacy policy into each of its websites no later than July 1, 2004.
(b) The privacy policy statement shall be published on the state's website, local government's website, or state agency's website and for each statement shall include:
(1) A description of the data the unit of government or agency collects on its website and how the data will be used by the unit of government or agency;
(2) The type of data and the purposes for which data are shared with other entities;
(3) Whether the unit of government's or agency's data collecting and sharing practices are mandatory or allow a browser to opt in or opt out of those practices;
(4) An explanation that certain information collected by the governmental unit or agency is subject to disclosure under the Freedom of Information Act of 1967, § 25-19-101 et seq.;
(5) A link to or instructions for locating the website's policy reference file, which shall identify the uniform resource locator for the website's policy statements and shall indicate those portions of the website and the website's “cookies” that are covered by each statement; and
(6) A link to the website's human-readable privacy policy.