Keypoint: New York lawmakers passed a consumer health bill while lawmakers in numerous other states continue to introduce consumer data privacy, children’s privacy, and data broker bills.
Below is the third weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change.
Table of Contents
- What’s New
- AI Bills
- Bill Tracker Chart
1. What’s New
The big news this week comes out of New York where the legislature passed Senator Liz Krueger’s SB 929. The bill governs the processing of “regulated health information” and has been compared in scope to Washington’s My Health My Data Act – although the New York bill lacks a private right of action. Senator Krueger ran a version of the bill last year (S 158). That bill passed the Senate but not the Assembly. It remains to be seen whether Governor Hochul will sign the bill into law as it is currently drafted. We will have more to say about the New York bill in a forthcoming article.
Turning to consumer data privacy bills, lawmakers introduced two competing bills in Mississippi – SB 2500 and SB 2779. SB 2500 is a Utah style bill. It does not require risk assessments or consent to process sensitive data. SB 2779 was introduced by Senator Angela Turner-Ford, who has unsuccessfully run privacy bills in prior sessions – 2023 (SB 2080), 2022 (SB 2330), and 2021 (SB 2612). The Mississippi legislature closes in early April.
New York lawmakers also introduced two more bills. Senator Gonzalez – who is running numerous AI-related bills this session that we are tracking through Byte Back AI – introduced the New York Privacy Act (S 3044). In prior years, that bill was run by Senator Kevin Thomas (S 6701), who has since left the legislature. Meanwhile, Assemblymember Nily Rozic introduced the New York Online Consumer Protection Act (A 3087). Prior versions of the bill have been introduced as far back as 2009. The short bill – less than three pages – focuses on regulating advertising networks.
In Virginia, a House subcommittee voted to pass by indefinitely HB 1817. That bill sought to amend the VCDPA to regulate social media platforms. House committee hearings are scheduled on four more Virginia bills for January 27.
Turning to children’s privacy bills, lawmakers in both blue and red states continue to introduce new bills. In Colorado, a bipartisan and bicameral group of lawmakers introduced SB 86, which seeks to regulate social media companies. Colorado lawmakers unsuccessfully ran a social media bill during last session.
Similarly, in Indiana, a bicameral group of Republican lawmakers (and one Democrat) introduced SB 11. That bill requires parental consent for kids under 16 to access social media. The bill is sponsored by Senator Liz Brown, who is the primary author of Indiana’s consumer data privacy law.
Finally, in Nebraska, Republican Senator Carolyn Bosn introduced LB 504 at the request of the governor. That bill is an Age-Appropriate Design Code Act.
All together, we are already tracking 24 children’s privacy bills filed across 12 states.
Staying in Nebraska, Democrat Senator Margo Juarez introduced a data broker / Delete Act bill (LB 602). The bill is now in committee.
In Montana, Senator Daniel Zolnikov’s SB 163 passed out of committee on January 16. That bill amends the state’s genetic information privacy act to add neural data.
Finally, on February 18, we will be hosting a webinar discussing the over 170 state AI bills introduced to date. The webinar is available exclusively to Byte Back AI subscribers. Click here for more information on paid subscriptions.
2. AI Bills
Our latest edition of Byte Back AI is now available to subscribers. Subscriptions start as low as $50/month. In this edition, we provide:
- Updates updates on AI bills in numerous states, including Nebraska, New Hampshire, Oregon, Mississippi, Vermont, Massachusetts, Connecticut, Rhode Island, New York, Virginia, Washington, and Maryland. In particular, we discuss the first state AI bill to fail this year as well as developments on numerous bills in Virginia.
- Updates on Colorado and Washington hearings.
- Our latest AI state bill tracker chart. We are now tracking over 170 state AI bills filed across 32 states.
- Our special feature of the week – a summary of Washington’s HB 1170 (AI transparency), which contains a private right of action.
Click here for more information on paid subscriptions.
3. Bill Tracker Chart
For more information on all of the privacy bills introduced to date, including links to the bills, bill status, last action, and hearing dates, please see our bill tracker chart.