Keypoint: In its second non-data broker enforcement action for violations of the CCPA, the California Privacy Protection Agency entered into a stipulated final order with a retailer for a $345,178 administrative fine and...more
5/7/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consent ,
Corporate Counsel ,
Data Collection ,
Enforcement Actions ,
Opt-Outs ,
Penalties ,
Personal Information ,
Privacy Laws ,
Retailers
Keypoint: A new Virginia law prohibits the collection, use, or sharing of reproductive or sexual health information without consent and provides Virginians with a private right of action for at least $500 per violation.
As...more
Keypoint: Last week, the Utah and Virginia governors took action on bills while bills crossed chambers in Montana, Oklahoma, New Hampshire, Vermont, and West Virginia.
Below is the twelfth weekly update on the status of...more
Keypoint: Last week, Kentucky’s governor signed a bill amending the state’s data privacy law while bills advanced in Connecticut, Illinois, New Hampshire, Pennsylvania, Tennessee, Texas, and West Virginia....more
Keypoint: It was a busy week with the Kentucky legislature passing a bill to amend the state’s consumer data privacy law, bills crossing chambers in Vermont, Washington and Arkansas, and movement with bills in numerous other...more
On March 12, 2025, the California Privacy Protection Agency (Agency) announced its first non-data broker enforcement action requiring a vehicle manufacturer to pay an administrative fine of $632,500 in connection with the...more
Keypoint: Last week, the Utah legislature passed two bills prior to closing while Georgia’s Senate passed a consumer data privacy bill and the Arizona House passed a social media bill.
Below is the ninth weekly update on...more
3/10/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
New Legislation ,
Online Safety for Children ,
Privacy Laws ,
Social Media ,
State Privacy Laws
Keypoint: Last week, consumer data privacy amendment bills crossed chambers in Montana and Kentucky, a social media bill crossed chambers in Colorado, and there were movements with numerous other bills.
Below is the eighth...more
3/3/2025
/ Artificial Intelligence ,
Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
New Legislation ,
Online Safety for Children ,
Privacy Laws ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws
Keypoint: Last week, the Virginia legislature passed a VCDPA amendment, kid’s privacy bills crossed chambers in South Carolina and Utah, and lawmakers continued to introduce new bills on various topics. Below is the seventh...more
Keypoint: Last week saw a flurry of activity across numerous states, including bills advancing in Virginia, Oklahoma, Washington, Utah, and South Carolina, while lawmakers continued to introduce bills across the country. ...more
2/17/2025
/ Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
Compliance ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
Keypoint: It was a very active week with movement on numerous bills, in particular in Virginia, as well as new bills introduced across the country. Below is the fifth weekly update on the status of proposed state privacy...more
2/10/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Protection ,
Minors ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Social Media ,
State Privacy Laws
Keypoint: It was another busy week with Virginia lawmakers advancing three bills and new consumer and children’s privacy bills introduced in multiple states. Below is the fourth weekly update on the status of proposed state...more
2/2/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
New Legislation ,
Online Safety for Children ,
Privacy Laws ,
Privacy Legislation ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws ,
Virginia
Last week, the New York legislature passed the New York Health Information Privacy Act (S 929) (the “Act”). If signed into law, the Act will add New York to the list of states that have enacted consumer health data-specific...more
1/28/2025
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Department of Health and Human Services (HHS) ,
GLBA Privacy ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
New York ,
Privacy Acts ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
Keypoint: New York lawmakers passed a consumer health bill while lawmakers in numerous other states continue to introduce consumer data privacy, children’s privacy, and data broker bills.
Below is the third weekly update...more
1/27/2025
/ Artificial Intelligence ,
Child Protective Services ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Privacy Laws ,
Privacy Policy ,
Regulatory Agenda ,
State Privacy Laws
Tracking U.S. state consumer data privacy legislation.
Our map tracks privacy legislation and provides links to resources and information related to active states.
To review prior years' state privacy legislation, visit...more
Keypoint: In our second weekly update for 2025, we are tracking new bills filed in Arkansas, Hawaii, Illinois, Massachusetts, Missouri, Nebraska, New Jersey, New York, Oklahoma, South Carolina, Texas, and Virginia. Below is...more
1/20/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
New Legislation ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Proposed Legislation ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws ,
Technology Sector
On January 13, 2025, Texas Attorney General’s Office filed its first lawsuit enforcing the Texas Data Privacy and Security Act (“TDPSA”). The law went into effect on July 1, 2024. The complaint also states claims under Texas’...more
1/14/2025
/ Civil Monetary Penalty ,
Consent ,
Consumer Privacy Rights ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Security ,
Data Sellers ,
Enforcement Actions ,
Geolocation ,
Insurance Industry ,
Personal Data ,
Privacy Laws ,
Right To Cure ,
Software Developers ,
State Attorneys General ,
State Privacy Laws ,
Texas ,
Third-Party
We are back for our sixth year of tracking proposed state privacy legislation and fifth year of providing weekly updates. As in past years, we will track proposed state privacy legislation through these weekly updates and our...more
1/13/2025
/ Algorithms ,
Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Legislative Agendas ,
Personal Data ,
Personal Information ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws
Keypoint: Although New York lacks a consumer data privacy law, the New York Attorney General’s office has taken the position that New York’s consumer protection laws require entities to implement certain tracking technology...more
Keypoint: Last week, Colorado passed children’s privacy and artificial intelligence bills, Vermont passed a consumer data privacy bill, Maryland’s consumer data privacy and AADC bills were signed into law, and Minnesota is on...more
5/13/2024
/ Artificial Intelligence ,
Biometric Information ,
Colorado ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Protection ,
Legislative Agendas ,
Online Safety for Children ,
Privacy Laws ,
Proposed Legislation
Keypoint: Last week, bills advanced in Colorado and California while, with legislatures in multiple states set to close this week, we will know the fate of significant bills in the coming days. Below is the fifteenth weekly...more
Keypoint: Last week, the Nebraska legislature passed a consumer data privacy bill. Below is the twelfth weekly update on the status of proposed state privacy legislation in 2024....more
Keypoint: Nebraska is the seventeenth state legislature to pass consumer data privacy legislation with a bill that largely tracks the Texas Data Privacy and Security Act. On April 11, 2024, the Nebraska legislature passed...more
Keypoint: Last week, the Maryland legislature passed consumer data privacy and Age-Appropriate Design Code Act bills, the Kentucky Governor signed HB 15 into law, three bills advanced out of a California Assembly Committee,...more
Keypoint: Last week, the Kentucky legislature passed a consumer data privacy bill, Colorado passed an amendment to the Colorado Privacy Act, and there was movement on bills in Maine, Maryland, Rhode Island, and Vermont....more