Keypoint: Last week, Kentucky’s governor signed a bill amending the state’s data privacy law while bills advanced in Connecticut, Illinois, New Hampshire, Pennsylvania, Tennessee, Texas, and West Virginia....more
Keypoint: Last week, the Virginia legislature passed a VCDPA amendment, kid’s privacy bills crossed chambers in South Carolina and Utah, and lawmakers continued to introduce new bills on various topics. Below is the seventh...more
Keypoint: Last week saw a flurry of activity across numerous states, including bills advancing in Virginia, Oklahoma, Washington, Utah, and South Carolina, while lawmakers continued to introduce bills across the country. ...more
2/17/2025
/ Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
Compliance ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
Keypoint: It was a very active week with movement on numerous bills, in particular in Virginia, as well as new bills introduced across the country. Below is the fifth weekly update on the status of proposed state privacy...more
2/10/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Protection ,
Minors ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Social Media ,
State Privacy Laws
On January 13, 2025, Texas Attorney General’s Office filed its first lawsuit enforcing the Texas Data Privacy and Security Act (“TDPSA”). The law went into effect on July 1, 2024. The complaint also states claims under Texas’...more
1/14/2025
/ Civil Monetary Penalty ,
Consent ,
Consumer Privacy Rights ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Security ,
Data Sellers ,
Enforcement Actions ,
Geolocation ,
Insurance Industry ,
Personal Data ,
Privacy Laws ,
Right To Cure ,
Software Developers ,
State Attorneys General ,
State Privacy Laws ,
Texas ,
Third-Party
We are back for our sixth year of tracking proposed state privacy legislation and fifth year of providing weekly updates. As in past years, we will track proposed state privacy legislation through these weekly updates and our...more
1/13/2025
/ Algorithms ,
Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Legislative Agendas ,
Personal Data ,
Personal Information ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws
Keypoint: Assuming the bills become law and go into effect, operators of websites and online services that collect the personal data of minors and are subject to the bills will need to undertake several compliance activities....more
Keypoint: The Minnesota bill contains several unique requirements and provisions, including a novel right to question the result of a profiling decision, privacy policy provisions that increase interoperability with existing...more
Keypoint: Maryland’s bill diverges from other Washington Privacy Act variants passed to date with unique data minimization, sensitive data, minor’s data privacy, and unlawful discrimination provisions (among others)....more
4/8/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Protection ,
Enforcement ,
Maryland ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Sensitive Personal Information ,
State Privacy Laws
Keypoint: New Hampshire is the fourteenth state to pass consumer data privacy legislation with a bill that is largely based on the Connecticut Data Privacy Act.
On January 18, 2024, the New Hampshire legislature passed...more
Keypoint: The Attorney General’s investigatory sweep focuses on how large California employers are handling the expiration of the CCPA’s employee data exemption.
On July 14, 2023, the California Attorney General announced a...more
Keypoint: Oregon is the eleventh state to pass consumer data privacy legislation with a bill that is one of the strongest passed to date.
On June 22, 2023, the Oregon legislature passed the Oregon Consumer Privacy Act...more
Keypoint: The Indiana legislature is the seventh state legislature to pass consumer data privacy legislation.
On April 13, 2023, the Indiana legislature passed SB 5. The bill largely tracks the Virginia Consumer Data...more
Update your bookmark, we just released our 2023 State Privacy Law Tracker. With state legislatures starting to open for the 2023 session, lawmakers are already introducing CCPA-like consumer privacy bills....more
Keypoint: The VCDPA is now finalized in advance of its January 1, 2023 effective date.
On April 11, 2022, Virginia Governor Glenn Youngkin signed three Virginia Consumer Data Protection Act (VCDPA) amendment bills into...more
Keypoint: This week legislatures in Florida, Washington, West Virginia and Wisconsin closed without passing bills while Maryland’s bill was converted into a one-year study.
Below is our ninth weekly update on the status of...more
3/14/2022
/ Biometric Information Privacy Act ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Colorado ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Personal Data ,
Popular ,
Proposed Legislation ,
State Privacy Laws ,
Virginia
Keypoint: Organizations subject to these laws will need to determine whether they are engaging in “sales,” which can be a complex and multifaceted analysis given the statutes’ varying definitions and exemptions....more
Keypoint: The CPRA requires that businesses use certain types of sensitive personal information only for limited purposes, otherwise they must notify consumers of the additional purposes and provide consumers the opportunity...more
Keypoint: The EDPB takes the position that geographical boundaries – and not GDPR’s jurisdictional reach – govern the restricted transfer determination.
On November 19, 2021, the European Data Protection Board (EDPB)...more
Keypoint: As introduced, the Ohio Personal Privacy Act would provide Ohio residents with some rights regarding their personal data, but it is not as extensive as the CPRA, CPA, and VCDPA...more
Keypoint: On July 7, 2021, Colorado Governor Jared Polis signed the Colorado Privacy Act into law, making Colorado the third state to pass broad consumer privacy legislation...more
Keypoint: This week bills in Florida and Connecticut continued to progress, the Washington Privacy Act failed to get out of the House at the deadline, and bills in Oklahoma and West Virginia died...more
4/12/2021
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
Proposed Legislation
Keypoint: The Colorado bill mirrors the Virginia Consumer Data Protection Act and Washington Privacy Act but contains some notable differences.
On March 19, 2021, Colorado lawmakers introduced the Colorado Privacy Act...more
3/22/2021
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Colorado ,
Consumer Privacy Rights ,
Data Privacy ,
Data Processing Rules ,
General Data Protection Regulation (GDPR) ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Personal Data ,
Popular ,
Proposed Legislation ,
State Attorneys General
Keypoint: There were four notable developments this week: the Florida House passed a bill out of committee, lawmakers proposed a new bill in Texas, the Washington Privacy Act was scheduled for a public hearing and committee...more
3/15/2021
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
State and Local Government
Keypoint: CCPA-like privacy bills continue to be introduced and work their way through state legislatures.
Those who attended our recent webinar or who subscribe to this blog know that we have been closely tracking...more