On June 25th, Rhode Island Governor Daniel McKee transmitted without signature (effectively a pocket veto) the Rhode Island Data Transparency and Privacy Protection Act (SB 2500 / HB 7787). The act is based on the Washington Privacy Act model but diverges from the prevalent forms of that model in two ways. First, the act contains a unique […]
Read moreThe New York legislature passed two bills on June 7, 2024 directed at children’s use of online technologies – the Stop Addictive Feeds Exploitation (SAFE) for Kids Act (S7694) that restricts access to addictive algorithmic feeds and the New York Child Data Protection Act (S7695) that bans sites from collecting, using, sharing or selling personal […]
Read moreOn May 24, Governor Tim Walz signed into law Minnesota’s new comprehensive data privacy law, the Minnesota Consumer Data Privacy Act (HF 4757 referenced as the MCDPA). The MCDPA goes into effect on July 31, 2025, with some exceptions for colleges and universities (who have until 2029). The MCDPA is similar to other state privacy laws, […]
Read moreThe proposed American Privacy Rights Act (APRA) has taken its first step U.S. House legislative process with several issue disagreements becoming more evident. On May 23, the U.S. House Committee on Energy and Commerce Subcommittee on Data, Innovation and Commerce approved the updated APRA, advancing the bill to full committee consideration. Just prior to the […]
Read moreIf signed by Governor Jared Polis, Colorado SB 24-041 would enhance its privacy act protections when an under 13 year-old child’s data is processed and there is a heightened risk of harm applying to any entity that controls consumer personal data (controller) and that conducts business in Colorado or delivers products or services that are […]
Read moreColorado Governor Jared Polis signed into law SB 205 on May 17, known as the Colorado Artificial Intelligence (AI) Act, that would go into effect February 1, 2026 and simultaneously released a signing statement contextualizing his approval of the bill. The Colorado legislature is also reportedly intending to study and possibly revise the bill before […]
Read moreThe Nebraska unicameral legislature passed the Nebraska Data Privacy Act (LB 1074) on April 11th which now heads to Nebraska Governor Jim Pillen for signature. Assuming the bill becomes law, Nebraska will become the 17th state to enact consumer data privacy legislation. The Nebraska bill largely tracks the Texas Data Privacy and Security Act with […]
Read moreOn April 4, Governor Andy Beshear signed into law HB 15 becoming the 15th state to enact comprehensive consumer data privacy legislation. The new Kentucky Consumer Data Protection Act (KCDPA) largely tracks the Virginia’s law but without this year’s amendments relating to children’s data. For agencies already complying with other non-California privacy laws, the Kentucky […]
Read more