Keypoint: Last week, the Colorado legislature passed an amendment to the state’s data privacy law, the Texas legislature passed a bill regulating app stores, and there were developments with bills in Connecticut, Maine, New...more
5/12/2025
/ Artificial Intelligence ,
Biometric Information ,
Colorado ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
New Legislation ,
Proposed Legislation ,
Social Media ,
State Privacy Laws ,
Texas
Keypoint: In its second non-data broker enforcement action for violations of the CCPA, the California Privacy Protection Agency entered into a stipulated final order with a retailer for a $345,178 administrative fine and...more
5/7/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consent ,
Corporate Counsel ,
Data Collection ,
Enforcement Actions ,
Opt-Outs ,
Penalties ,
Personal Information ,
Privacy Laws ,
Retailers
Keypoint: Last week, a Virginia social media bill became law while bills advanced in Colorado, California, North Carolina, Connecticut, South Carolina, and Texas.
Below is the seventeenth weekly update on the status of...more
5/5/2025
/ California ,
Colorado ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
New Legislation ,
Proposed Legislation ,
Social Media ,
State Privacy Laws ,
Texas ,
Virginia
Keypoint: The Colorado legislature is considering significant amendments to the nation’s first algorithmic discrimination law.
On April 28, 2025, Colorado Senator Robert Rodriguez and Representative Brianna Titone introduced...more
Keypoint: Last week, Alabama’s House passed a consumer data privacy bill, the Colorado Senate passed a bill to amend the Colorado Privacy Act, Oklahoma’s consumer data privacy bill advanced in the House, several bills...more
Keypoint: A new Virginia law prohibits the collection, use, or sharing of reproductive or sexual health information without consent and provides Virginians with a private right of action for at least $500 per violation.
As...more
Keypoint: Last week, bills passed the Montana and Arkansas legislatures while bills advanced in Alabama, Florida, Oregon, and Texas.
Below is the fifteenth weekly update on the status of proposed state privacy legislation in...more
4/21/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
New Legislation ,
Online Safety for Children ,
Proposed Legislation ,
Social Media ,
State Legislatures ,
State Privacy Laws
Keypoint: If signed by the governor, the Arkansas bill will create new obligations for the collection and processing of personal information for Arkansas children and teens under 16 years of age, however, compliance may prove...more
Keypoint: Last week, Montana’s legislature inched closer to significantly revising its consumer data privacy law, Oregon’s consumer data privacy amendment bills advanced, and there were numerous developments with Arkansas’...more
Below is the thirteenth weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change....more
Keypoint: Last week, the Utah and Virginia governors took action on bills while bills crossed chambers in Montana, Oklahoma, New Hampshire, Vermont, and West Virginia.
Below is the twelfth weekly update on the status of...more
Keypoint: Last week, Kentucky’s governor signed a bill amending the state’s data privacy law while bills advanced in Connecticut, Illinois, New Hampshire, Pennsylvania, Tennessee, Texas, and West Virginia....more
Keypoint: It was a busy week with the Kentucky legislature passing a bill to amend the state’s consumer data privacy law, bills crossing chambers in Vermont, Washington and Arkansas, and movement with bills in numerous other...more
On March 12, 2025, the California Privacy Protection Agency (Agency) announced its first non-data broker enforcement action requiring a vehicle manufacturer to pay an administrative fine of $632,500 in connection with the...more
Keypoint: Last week, the Utah legislature passed two bills prior to closing while Georgia’s Senate passed a consumer data privacy bill and the Arizona House passed a social media bill.
Below is the ninth weekly update on...more
3/10/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
New Legislation ,
Online Safety for Children ,
Privacy Laws ,
Social Media ,
State Privacy Laws
Keypoint: Last week, consumer data privacy amendment bills crossed chambers in Montana and Kentucky, a social media bill crossed chambers in Colorado, and there were movements with numerous other bills.
Below is the eighth...more
3/3/2025
/ Artificial Intelligence ,
Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
New Legislation ,
Online Safety for Children ,
Privacy Laws ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws
Keypoint: Last week, the Virginia legislature passed a VCDPA amendment, kid’s privacy bills crossed chambers in South Carolina and Utah, and lawmakers continued to introduce new bills on various topics. Below is the seventh...more
Keypoint: Last week saw a flurry of activity across numerous states, including bills advancing in Virginia, Oklahoma, Washington, Utah, and South Carolina, while lawmakers continued to introduce bills across the country. ...more
2/17/2025
/ Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
Compliance ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
Keypoint: It was a very active week with movement on numerous bills, in particular in Virginia, as well as new bills introduced across the country. Below is the fifth weekly update on the status of proposed state privacy...more
2/10/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Protection ,
Minors ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Social Media ,
State Privacy Laws
Keypoint: It was another busy week with Virginia lawmakers advancing three bills and new consumer and children’s privacy bills introduced in multiple states. Below is the fourth weekly update on the status of proposed state...more
2/2/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
New Legislation ,
Online Safety for Children ,
Privacy Laws ,
Privacy Legislation ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws ,
Virginia
Last week, the New York legislature passed the New York Health Information Privacy Act (S 929) (the “Act”). If signed into law, the Act will add New York to the list of states that have enacted consumer health data-specific...more
1/28/2025
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Department of Health and Human Services (HHS) ,
GLBA Privacy ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
New York ,
Privacy Acts ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
Keypoint: New York lawmakers passed a consumer health bill while lawmakers in numerous other states continue to introduce consumer data privacy, children’s privacy, and data broker bills.
Below is the third weekly update...more
1/27/2025
/ Artificial Intelligence ,
Child Protective Services ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Privacy Laws ,
Privacy Policy ,
Regulatory Agenda ,
State Privacy Laws
Tracking U.S. state consumer data privacy legislation.
Our map tracks privacy legislation and provides links to resources and information related to active states.
To review prior years' state privacy legislation, visit...more
Keypoint: In our second weekly update for 2025, we are tracking new bills filed in Arkansas, Hawaii, Illinois, Massachusetts, Missouri, Nebraska, New Jersey, New York, Oklahoma, South Carolina, Texas, and Virginia. Below is...more
1/20/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
New Legislation ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Proposed Legislation ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws ,
Technology Sector
On January 13, 2025, Texas Attorney General’s Office filed its first lawsuit enforcing the Texas Data Privacy and Security Act (“TDPSA”). The law went into effect on July 1, 2024. The complaint also states claims under Texas’...more
1/14/2025
/ Civil Monetary Penalty ,
Consent ,
Consumer Privacy Rights ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Security ,
Data Sellers ,
Enforcement Actions ,
Geolocation ,
Insurance Industry ,
Personal Data ,
Privacy Laws ,
Right To Cure ,
Software Developers ,
State Attorneys General ,
State Privacy Laws ,
Texas ,
Third-Party