Listen to this post

Keypoint: Last week, Oregon and New Jersey advanced bills to amend their state’s consumer data privacy laws, California committees advanced several bills, Nebraska enacted a social media law, and Texas advanced several social media bills.

Below is the twentieth weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change.

Table of Contents

  1. What’s New
  2. AI Bills
  3. Bill Tracker Chart

1. What’s New

The Oregon Senate passed HB 2008 on May 21. The bill amends Oregon’s consumer data privacy law to prohibit targeted advertising, profiling, and the sale of personal data if a controller has actual knowledge or willfully disregards a consumer is 13-15 years old. Controllers also cannot sell precise geolocation data. The bill already passed the House but was amended in the Senate and will need to go back to the House for concurrence.

In New Jersey, the Assembly unanimously passed A 5017. The bill amends the state’s consumer data privacy law to exempt national securities associations and adds a data level exemption for insurance fraud detection activities.

In California, May 23 was the deadline for fiscal committees to hear and report to the floor bills introduced in their house. The deadline resulted in movement on several bills we are tracking. In the Senate, three bills were amended, passed out of the Appropriations committee, and read a second time on the Senate floor: SB 690 (CIPA amendment), SB 771 (social media), and SB 354 (Insurance Consumer Privacy Protection Act of 2025). Meanwhile, SB 44 (brain-computer interfaces: neural data) was held in the Appropriations committee.

In the Assembly, AB 1043 (age verification signals) was amended, passed out of the Appropriations committee, and read a second time on the Assembly floor. Conversely, AB 1355 (location privacy) was held under submission in the Appropriations committee.

Moving forward, June 6 is the crossover deadline for bills in California.

In Nebraska, the governed signed the Parental Rights in Social Media Act (LB 383) into law.

In Texas, three bills were favorably reported out of committee: SB 1860 (SCOPE Act amendment) and SB 2881 (social media) were favorably reported out of House committees while HB 186 (social media) was favorably reported out of a Senate committee. All three bills previously passed their house of origin.

Finally, the Minnesota legislature closed on May 19 without passing any of the seven bills we had tracked.

2. AI Bills

Our latest edition of Byte Back AI is now available to subscribers. Subscriptions start as low as $50/month. In this edition, we provide:

  • Updates on new laws in Florida, Maryland, Montana, and Nebraska; the Nevada and Texas legislatures passing bills; and bills crossing chambers in California, Connecticut, Illinois, Nevada, New York, and Texas.
  • Our special feature of the week – a summary of California AB 410 (amendments to California’s bot disclosure law).
  • Our “three things to know this week.”
  • An updated state AI bill tracker chart.

Click here for more information on paid subscriptions.

3. Bill Tracker Chart

For more information on all of the privacy bills introduced to date, including links to the bills, bill status, last action, and hearing dates, please see our bill tracker chart.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of David Stauss David Stauss

David routinely counsels clients on complying with privacy laws such as the EU’s General Data Protection Regulation, the California Consumer Privacy Act, the Colorado Privacy Act, and other state privacy laws. David is certified by the International Association of Privacy Professionals as…

David routinely counsels clients on complying with privacy laws such as the EU’s General Data Protection Regulation, the California Consumer Privacy Act, the Colorado Privacy Act, and other state privacy laws. David is certified by the International Association of Privacy Professionals as a Privacy Law Specialist, Certified Information Privacy Professional (US and EU), Certified Information Privacy Technologist, and Fellow of Information Privacy.