Keypoint: A new Virginia law prohibits the collection, use, or sharing of reproductive or sexual health information without consent and provides Virginians with a private right of action for at least $500 per violation.
As...more
Keypoint: Last week, Kentucky’s governor signed a bill amending the state’s data privacy law while bills advanced in Connecticut, Illinois, New Hampshire, Pennsylvania, Tennessee, Texas, and West Virginia....more
Keypoint: It was a busy week with the Kentucky legislature passing a bill to amend the state’s consumer data privacy law, bills crossing chambers in Vermont, Washington and Arkansas, and movement with bills in numerous other...more
On March 12, 2025, the California Privacy Protection Agency (Agency) announced its first non-data broker enforcement action requiring a vehicle manufacturer to pay an administrative fine of $632,500 in connection with the...more
Keypoint: Last week, the Utah legislature passed two bills prior to closing while Georgia’s Senate passed a consumer data privacy bill and the Arizona House passed a social media bill.
Below is the ninth weekly update on...more
3/10/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
New Legislation ,
Online Safety for Children ,
Privacy Laws ,
Social Media ,
State Privacy Laws
Keypoint: Last week, the Virginia legislature passed a VCDPA amendment, kid’s privacy bills crossed chambers in South Carolina and Utah, and lawmakers continued to introduce new bills on various topics. Below is the seventh...more
Keypoint: Last week saw a flurry of activity across numerous states, including bills advancing in Virginia, Oklahoma, Washington, Utah, and South Carolina, while lawmakers continued to introduce bills across the country. ...more
2/17/2025
/ Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
Compliance ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
Keypoint: It was a very active week with movement on numerous bills, in particular in Virginia, as well as new bills introduced across the country. Below is the fifth weekly update on the status of proposed state privacy...more
2/10/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Protection ,
Minors ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Social Media ,
State Privacy Laws
Keypoint: It was another busy week with Virginia lawmakers advancing three bills and new consumer and children’s privacy bills introduced in multiple states. Below is the fourth weekly update on the status of proposed state...more
2/2/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
New Legislation ,
Online Safety for Children ,
Privacy Laws ,
Privacy Legislation ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws ,
Virginia
Last week, the New York legislature passed the New York Health Information Privacy Act (S 929) (the “Act”). If signed into law, the Act will add New York to the list of states that have enacted consumer health data-specific...more
1/28/2025
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Department of Health and Human Services (HHS) ,
GLBA Privacy ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
New York ,
Privacy Acts ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
Keypoint: New York lawmakers passed a consumer health bill while lawmakers in numerous other states continue to introduce consumer data privacy, children’s privacy, and data broker bills.
Below is the third weekly update...more
1/27/2025
/ Artificial Intelligence ,
Child Protective Services ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Privacy Laws ,
Privacy Policy ,
Regulatory Agenda ,
State Privacy Laws
Tracking U.S. state consumer data privacy legislation.
Our map tracks privacy legislation and provides links to resources and information related to active states.
To review prior years' state privacy legislation, visit...more
Keypoint: In our second weekly update for 2025, we are tracking new bills filed in Arkansas, Hawaii, Illinois, Massachusetts, Missouri, Nebraska, New Jersey, New York, Oklahoma, South Carolina, Texas, and Virginia. Below is...more
1/20/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
New Legislation ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Proposed Legislation ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws ,
Technology Sector
We are back for our sixth year of tracking proposed state privacy legislation and fifth year of providing weekly updates. As in past years, we will track proposed state privacy legislation through these weekly updates and our...more
1/13/2025
/ Algorithms ,
Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Legislative Agendas ,
Personal Data ,
Personal Information ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws
Keypoint: The appellate court ruled that the California Age-Appropriate Design Code Act’s impact assessment provision is unconstitutional and remanded the case back to the trial court to consider the constitutionality of the...more
8/21/2024
/ Appellate Courts ,
California ,
California Consumer Privacy Act (CCPA) ,
Corporate Counsel ,
Data Collection ,
Data Protection ,
Data Protection Impact Assessments (DPIAs) ,
First Amendment ,
Goods or Services ,
Impact Assessments ,
Minors ,
Online Marketplace ,
Popular ,
Unconstitutional Condition
Keypoint: Companies onboarding AI products and services need to understand the potential risks associated with these products and implement contractual provisions to manage them. With the rapid emergence of artificial...more
8/20/2024
/ Artificial Intelligence ,
Consumer Service Agreements ,
Contract Terms ,
Contractual Safeguards ,
Data Protection ,
Data-Sharing ,
Due Diligence ,
Employment Discrimination ,
Equal Employment Opportunity Commission (EEOC) ,
Intellectual Property Protection ,
Liability ,
Risk Assessment ,
Vendors
Keypoint: Assuming the bills become law and go into effect, operators of websites and online services that collect the personal data of minors and are subject to the bills will need to undertake several compliance activities....more
Keypoint: The California legislature is considering several bills that, if passed, would add to the nation’s emerging legal patchwork governing the use of artificial intelligence. In mid-May, Colorado Governor Jared Polis...more
Keypoint: The Minnesota bill contains several unique requirements and provisions, including a novel right to question the result of a profiling decision, privacy policy provisions that increase interoperability with existing...more
Keypoint: Last week, Colorado passed children’s privacy and artificial intelligence bills, Vermont passed a consumer data privacy bill, Maryland’s consumer data privacy and AADC bills were signed into law, and Minnesota is on...more
5/13/2024
/ Artificial Intelligence ,
Biometric Information ,
Colorado ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Protection ,
Legislative Agendas ,
Online Safety for Children ,
Privacy Laws ,
Proposed Legislation
Keypoint: Last week, the Nebraska Governor signed the Nebraska Data Privacy Act into law, the Maine legislature closed without passing a consumer data privacy bill, Colorado’s biological/neural data bill was signed into law,...more
Keypoint: Last week, the Nebraska legislature passed a consumer data privacy bill. Below is the twelfth weekly update on the status of proposed state privacy legislation in 2024....more
Keypoint: Maryland’s bill diverges from other Washington Privacy Act variants passed to date with unique data minimization, sensitive data, minor’s data privacy, and unlawful discrimination provisions (among others)....more
4/8/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Protection ,
Enforcement ,
Maryland ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Sensitive Personal Information ,
State Privacy Laws
Keypoint: Last week, the Maryland legislature passed consumer data privacy and Age-Appropriate Design Code Act bills, the Kentucky Governor signed HB 15 into law, three bills advanced out of a California Assembly Committee,...more
Keypoint: Last week, the Kentucky legislature passed a consumer data privacy bill, Colorado passed an amendment to the Colorado Privacy Act, and there was movement on bills in Maine, Maryland, Rhode Island, and Vermont....more