![Photo of David Stauss [Former Attorney]](https://lexblogplatform.com/wp-content/uploads/sites/631/userphoto/7147-1572288796.jpg)
Keypoint: Last week, the Nebraska Governor signed the Nebraska Data Privacy Act into law, the Maine legislature closed without passing a consumer data privacy bill, Colorado’s biological/neural data bill was signed into law, and there were developments with bills in California, Virginia, Minnesota, Vermont, Wisconsin and Iowa.
Below is the thirteenth weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: Last week, the Nebraska legislature passed a consumer data privacy bill.
Below is the twelfth weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: Nebraska is the seventeenth state legislature to pass consumer data privacy legislation with a bill that largely tracks the Texas Data Privacy and Security Act.
On April 11, 2024, the Nebraska legislature passed the Nebraska Data Privacy Act (LB 1074). We have been tracking the bill since it was first introduced under LB 1294. That bill never advanced out of committee; however, it was added to LB 1074 in late March as part of a larger multi-subject 139 page bill. The bill unanimously passed Nebraska’s unicameral legislature on April 11. It now heads to Nebraska Governor Jim Pillen. Assuming the bill becomes law, Nebraska will become either the sixteenth or seventeenth state to enact consumer data privacy legislation, depending on whether Maryland’s bill, which passed the Maryland legislature last Saturday, is enacted first.
The Nebraska bill largely tracks the Texas Data Privacy and Security Act, but with some differences we identify below. As with prior bills, we have added the Nebraska bill to our chart providing a detailed comparison of laws enacted to date. We also have added Nebraska to our sensitive data comparison chart.
Keypoint: Maryland’s bill diverges from other Washington Privacy Act variants passed to date with unique data minimization, sensitive data, minor’s data privacy, and unlawful discrimination provisions (among others).
On April 6, 2024, the Maryland legislature passed the Maryland Online Data Privacy Act of 2024 (MODPA) (SB 541). A companion House bill (HB 567) also appears likely to pass before the legislature closes on April 8. Subject to the procedural formalities in the legislature, the bills will next head to Maryland Governor Wes Moore for consideration.
Assuming MODPA becomes law, Maryland will become the sixteenth state to pass broad consumer data privacy legislation. However, Maryland will be the first state to pass a Washington Privacy Act variant that contains unique provisions regarding data minimization, sensitive data, minor’s data privacy, and unlawful discrimination – among other provisions. In doing so, Maryland injects a new wrinkle into the state privacy law debate much like Washington did with last year’s My Health My Data Act. MODPA also contains a low threshold for applicability such that even smaller companies may need to comply with its provisions.
The below article analyzes MODPA’s contours, including some of its more notable provisions and deviations. We also have added MODPA to our chart providing a detailed comparison of the laws enacted to date. It should be noted that – as of the date of this article – the bills available on the legislature’s website have not yet been updated to reflect the final amendments although we have included those amendments in our analysis.
The Maryland legislature also passed Age-Appropriate Design Code Act companion bills (SB 571 / HB 603). We will provide a separate article analyzing those bills.
Keypoint: Last week, the Maryland legislature passed consumer data privacy and Age-Appropriate Design Code Act bills, the Kentucky Governor signed HB 15 into law, three bills advanced out of a California Assembly Committee, and there was movement with bills in Minnesota, Vermont, Louisiana, Illinois and Colorado.
Below is the eleventh weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: Last week, the Kentucky legislature passed a consumer data privacy bill, Colorado passed an amendment to the Colorado Privacy Act, and there was movement on bills in Maine, Maryland, Rhode Island, and Vermont.
Below is the tenth weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: Kentucky is the fifteenth state to pass consumer data privacy legislation with a bill that largely tracks the Virginia Consumer Data Protection Act.
On March 27, 2024, the Kentucky legislature passed the Kentucky Consumer Data Protection Act (HB 15). The bill unanimously passed the House on February 20. The Senate passed the bill on March 11, but with two minor floor amendments. On March 27, the House unanimously concurred in the Senate floor amendments. The bill now heads to Kentucky Governor Andy Beshear. Assuming the bill becomes law, Kentucky will become the fifteenth state to enact consumer data privacy legislation.
The Kentucky bill largely tracks the Virginia Consumer Data Protection Act (VCDPA) but without this year’s VCDPA amendments relating to children’s data. For entities already complying with other non-California privacy laws, the Kentucky bill will not require any additional compliance burdens. The bill does contain small variations from the VCDPA, which we discuss below.
As with prior bills, we have added the Kentucky bill to our chart providing a detailed comparison of laws enacted to date.
Keypoint: Since our last update on US artificial intelligence (AI) legislation impacting the private sector, Utah enacted the first AI private sector bill of 2024, Oklahoma moved closer to passing an AI Bill of Rights, Connecticut’s bill advanced through a committee, and California lawmakers introduced two bills that would establish transparency requirements around generative AI and personal information used to train AI models.
Below is our third update on the status of pending US artificial intelligence (AI) legislation that would affect the private sector.
Keypoint: Last week, consumer data privacy bills passed out of the Vermont and Pennsylvania Houses, an Age-Appropriate Design Code Act variant bill passed out of the Vermont Senate, and bills advanced in Colorado, Maryland, Minnesota, and Georgia.
Below is the ninth weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: It was a very busy week with Kentucky on the cusp of passing a consumer data privacy bill, Maryland advancing consumer and children’s bills, and movement on bills in Minnesota, Vermont, Georgia, Maine, and New York.
Below is the eighth weekly update on the status of proposed state privacy legislation in 2024.