Tracking U.S. state consumer data privacy legislation.
Our map tracks privacy legislation and provides links to resources and information related to active states.
To review prior years' state privacy legislation, visit...more
Keypoint: In our second weekly update for 2025, we are tracking new bills filed in Arkansas, Hawaii, Illinois, Massachusetts, Missouri, Nebraska, New Jersey, New York, Oklahoma, South Carolina, Texas, and Virginia. Below is...more
1/20/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
New Legislation ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Proposed Legislation ,
Regulatory Agenda ,
Social Media ,
State Privacy Laws ,
Technology Sector
On January 13, 2025, Texas Attorney General’s Office filed its first lawsuit enforcing the Texas Data Privacy and Security Act (“TDPSA”). The law went into effect on July 1, 2024. The complaint also states claims under Texas’...more
1/14/2025
/ Civil Monetary Penalty ,
Consent ,
Consumer Privacy Rights ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Security ,
Data Sellers ,
Enforcement Actions ,
Geolocation ,
Insurance Industry ,
Personal Data ,
Privacy Laws ,
Right To Cure ,
Software Developers ,
State Attorneys General ,
State Privacy Laws ,
Texas ,
Third-Party
We are back for our sixth year of tracking proposed state privacy legislation and fifth year of providing weekly updates. As in past years, we will track proposed state privacy legislation through these weekly updates and our...more
1/13/2025
/ Algorithms ,
Artificial Intelligence ,
Biometric Information ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Legislative Agendas ,
Personal Data ,
Personal Information ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws
Welcome to the first edition of Byte Back AI, a weekly newsletter providing updates on proposed state AI bills and regulations, an AI bill tracker chart, summaries of important AI hearings, and special features....more
12/23/2024
/ Algorithms ,
Anti-Discrimination Policies ,
Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California Privacy Protection Agency (CPPA) ,
Civil Rights Act ,
Colorado ,
Compliance ,
Innovative Technology ,
Machine Learning ,
Proposed Legislation ,
Regulatory Agenda ,
State Privacy Laws
Keypoint: The attorney general’s office modified the Colorado Privacy Act Rules to create a process for issuing opinion letters and interpretative guidance and to address the biometric and children’s privacy amendments passed...more
12/9/2024
/ Biometric Information ,
Colorado ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Controller ,
Data Privacy ,
Employee Privacy Rights ,
Minors ,
Online Safety for Children ,
Opinion Letter ,
State Attorneys General ,
State Privacy Laws
Throughout the 2024 legislative session, we have been tracking numerous privacy- and AI-related bills pending in California. Ten of those bills passed the state legislature before the legislative session ended on August 31...more
10/7/2024
/ Artificial Intelligence ,
California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data-Sharing ,
Machine Learning ,
Minors ,
Opt-Outs ,
Personal Information ,
State Privacy Laws ,
Training ,
Transparency
Keypoint: The proposed draft amendments modify the Colorado Privacy Act Rules to create a process for issuing opinion letters and interpretative guidance and to address the biometric and children’s privacy amendments passed...more
9/16/2024
/ Biometric Information ,
Colorado ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Controller ,
Data Privacy ,
Minors ,
Opinion Letter ,
Proposed Amendments ,
State Privacy Laws
On Saturday, August 31, the California legislature closed its 2024 session. During the past calendar year, we tracked numerous privacy and AI-related bills with fourteen of them passing out of their chamber of origin prior to...more
9/3/2024
/ Algorithms ,
Artificial Intelligence ,
Bias ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Corporate Counsel ,
Data Privacy ,
Discrimination ,
Online Safety for Children ,
Opt-Outs ,
State Privacy Laws ,
Training ,
Transparency
Keypoint: The California legislature enters into the final week of its session with many bills still under consideration. We are currently tracking thirteen privacy and AI-related bills that previously crossed chambers prior...more
Keypoint: Last week, several privacy and AI bills passed out of committee (with some receiving amendments) while two bills died in committee. We are currently tracking thirteen privacy and AI-related bills that previously...more
8/19/2024
/ Algorithms ,
Artificial Intelligence ,
California ,
California Consumer Privacy Act (CCPA) ,
Corporate Counsel ,
Disclosure Requirements ,
Online Safety for Children ,
Personal Information ,
Social Media ,
State Privacy Laws ,
User-Generated Content
Keypoint: Last week, the California legislature returned from its summer recess and began moving forward with privacy and AI legislation prior to the August 31 session closing date.
We are currently tracking thirteen...more
8/12/2024
/ Algorithms ,
Artificial Intelligence ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Discrimination ,
Online Safety for Children ,
Opt-Outs ,
Social Media ,
State Privacy Laws ,
Transparency
Keypoint: The California legislature has many pending privacy and AI-related bills to consider before it closes on August 31. The California legislature left for its summer recess on July 3 and will reconvene on August 5....more
Keypoint: While the act does not include many provisions found in the more recent consumer data privacy laws, it would expand privacy notice obligations in one significant way although the applicability and scope of that...more
6/17/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data-Sharing ,
FERPA ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Minors ,
New Legislation ,
Opt-Outs ,
Personally Identifiable Information ,
Popular ,
Rhode Island ,
State Privacy Laws ,
Transparency
Keypoint: Assuming the bills become law and go into effect, operators of websites and online services that collect the personal data of minors and are subject to the bills will need to undertake several compliance activities....more
Keypoint: Last week, bills advanced in Colorado and California while, with legislatures in multiple states set to close this week, we will know the fate of significant bills in the coming days. Below is the fifteenth weekly...more
Keypoint: Colorado employers and controllers that collect and process biometric data and identifiers will need to comply with disclosure, consent, and retention requirements beginning on July 1, 2025. In late April, the...more
Keypoint: Last week, the Colorado legislature passed a bill amending the Colorado Privacy Act to add provisions regarding biometric data and the California legislature advanced numerous bills....more
Keypoint: Last week, the Nebraska Governor signed the Nebraska Data Privacy Act into law, the Maine legislature closed without passing a consumer data privacy bill, Colorado’s biological/neural data bill was signed into law,...more
Keypoint: Last week, the Nebraska legislature passed a consumer data privacy bill. Below is the twelfth weekly update on the status of proposed state privacy legislation in 2024....more
Keypoint: Maryland’s bill diverges from other Washington Privacy Act variants passed to date with unique data minimization, sensitive data, minor’s data privacy, and unlawful discrimination provisions (among others)....more
4/8/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Protection ,
Enforcement ,
Maryland ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Sensitive Personal Information ,
State Privacy Laws
Keypoint: Last week, the Maryland legislature passed consumer data privacy and Age-Appropriate Design Code Act bills, the Kentucky Governor signed HB 15 into law, three bills advanced out of a California Assembly Committee,...more
Keypoint: Last week, the Kentucky legislature passed a consumer data privacy bill, Colorado passed an amendment to the Colorado Privacy Act, and there was movement on bills in Maine, Maryland, Rhode Island, and Vermont....more
Keypoint: Last week, consumer data privacy bills passed out of the Vermont and Pennsylvania Houses, an Age-Appropriate Design Code Act variant bill passed out of the Vermont Senate, and bills advanced in Colorado, Maryland,...more
3/25/2024
/ Biometric Information ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Online Safety for Children ,
Privacy Laws ,
Proposed Legislation ,
State Privacy Laws
Keypoint: It was a very busy week with Kentucky on the cusp of passing a consumer data privacy bill, Maryland advancing consumer and children’s bills, and movement on bills in Minnesota, Vermont, Georgia, Maine, and New York....more
3/18/2024
/ Biometric Information ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Online Safety for Children ,
Privacy Laws ,
Proposed Legislation ,
State Privacy Laws