California Governor Gavin Newsom signed a series of AI and privacy-related bills, but vetoed the more controversial measures. It remains to be seen whether the California legislature will attempt to override any of the vetoes where a two-thirds vote in both the California Senate and Assembly is needed. This summary was updated on 10/7/24 to […]
Read more
On June 25th, Rhode Island Governor Daniel McKee transmitted without signature (effectively a pocket veto) the Rhode Island Data Transparency and Privacy Protection Act (SB 2500 / HB 7787). The act is based on the Washington Privacy Act model but diverges from the prevalent forms of that model in two ways. First, the act contains a unique […]
Read more
The New York legislature passed two bills on June 7, 2024 directed at children’s use of online technologies – the Stop Addictive Feeds Exploitation (SAFE) for Kids Act (S7694) that restricts access to addictive algorithmic feeds and the New York Child Data Protection Act (S7695) that bans sites from collecting, using, sharing or selling personal […]
Read more
On May 24, Governor Tim Walz signed into law Minnesota’s new comprehensive data privacy law, the Minnesota Consumer Data Privacy Act (HF 4757 referenced as the MCDPA). The MCDPA goes into effect on July 31, 2025, with some exceptions for colleges and universities (who have until 2029). The MCDPA is similar to other state privacy laws, […]
Read more
The proposed American Privacy Rights Act (APRA) has taken its first step U.S. House legislative process with several issue disagreements becoming more evident. On May 23, the U.S. House Committee on Energy and Commerce Subcommittee on Data, Innovation and Commerce approved the updated APRA, advancing the bill to full committee consideration. Just prior to the […]
Read more
If signed by Governor Jared Polis, Colorado SB 24-041 would enhance its privacy act protections when an under 13 year-old child’s data is processed and there is a heightened risk of harm applying to any entity that controls consumer personal data (controller) and that conducts business in Colorado or delivers products or services that are […]
Read more
The Nebraska unicameral legislature passed the Nebraska Data Privacy Act (LB 1074) on April 11th which now heads to Nebraska Governor Jim Pillen for signature. Assuming the bill becomes law, Nebraska will become the 17th state to enact consumer data privacy legislation. The Nebraska bill largely tracks the Texas Data Privacy and Security Act with […]
Read more
On April 4, Governor Andy Beshear signed into law HB 15 becoming the 15th state to enact comprehensive consumer data privacy legislation. The new Kentucky Consumer Data Protection Act (KCDPA) largely tracks the Virginia’s law but without this year’s amendments relating to children’s data. For agencies already complying with other non-California privacy laws, the Kentucky […]
Read more
Just prior to its first-in-the-nation presidential primary this month, the New Hampshire legislature passed SB255 that is expected by signed into law by Governor Christopher Sununu that will make it the second law comprehensive consumer data privacy bill enacted in 2024. The bill’s effective date is January 1, 2025. The New Hampshire legislation largely follows […]
Read more
Aug. 22, 2022 – For years, the issue of regulating data privacy has been addressed largely by individual states, with little comprehensive action on the federal level. But that may be about to change in light of a more aggressive Federal Trade Commission (FTC), a new bipartisan proposal in Congress, and the U.S. Supreme Court’s […]
Read more