Keypoint: New York lawmakers passed a consumer health bill while lawmakers in numerous other states continue to introduce consumer data privacy, children’s privacy, and data broker bills.
Below is the third weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change.
Update your bookmark, we just released our 2025 State Privacy Law Tracker.
For the fifth year in a row, we will be tracking state consumer data privacy legislation on our tracker map and through weekly updates posted on this blog. If you are not already subscribed to our blog, consider doing so.
Keypoint: In our second weekly update for 2025, we are tracking new bills filed in Arkansas, Hawaii, Illinois, Massachusetts, Missouri, Nebraska, New Jersey, New York, Oklahoma, South Carolina, Texas, and Virginia.
Below is the second weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change.
Keypoint: The 2025 state legislative cycle begins with lawmakers introducing twenty-three bills, including five state consumer data privacy bills.
We are back for our sixth year of tracking proposed state privacy legislation and fifth year of providing weekly updates. As in past years, we will track proposed state privacy legislation through these weekly updates and our forthcoming state privacy law tracker map.
In this year’s weekly updates, we will continue to track proposed bills concerning consumer data, children’s data, biometric data, consumer health data, and data brokers.
With the explosion of AI-related state bills (nearly 500 bills filed last year) and the significant resources necessary to track those bills, we have moved our coverage of those bills to a separate paid weekly newsletter – Byte Back AI. In Part 2, below, we provide more information on this week’s newsletter, which includes updates on dozens of new bills introduced last week and a summary of a new algorithmic discrimination bill with a private right of action.
We also made one structural change to our bill tracker charts this year. We combined our various tracker charts into a single chart and added a column identifying the bill’s category.
Now to our first weekly update. As always, the contents provided below are time-sensitive and subject to change. If you are not already subscribed to our blog, consider doing so to stay updated.
Keypoint: The Minnesota bill contains several unique requirements and provisions, including a novel right to question the result of a profiling decision, privacy policy provisions that increase interoperability with existing state laws, and new privacy program requirements such as a requirement for controllers to maintain a data inventory.
On May 19, the Minnesota legislature passed the Minnesota Consumer Data Privacy Act (HF 4757 / SF 4782). The bill, which is sponsored by Representative Steve Elkins, was passed as Article 5 of a larger omnibus bill. The bill next moves to Governor Tim Walz for consideration.
The Minnesota bill largely tracks the Washington Privacy Act model but with some significant and unique variations. For example, the bill creates a novel right to question the result of a profiling decision and have a controller provide additional information regarding that decision. It also contains privacy policy requirements that are intended to increase interoperability with other state consumer data privacy laws. Further, the bill contains provisions requiring controllers to maintain a data inventory and document and maintain a description of policies and procedures the controller has adopted to comply with the bill’s provisions. We discuss those requirements and provisions, along with others, in the below article.
As with prior bills, we have added the Minnesota bill to our chart providing a detailed comparison of laws enacted to date.
Keypoint: Last week, Colorado passed children’s privacy and artificial intelligence bills, Vermont passed a consumer data privacy bill, Maryland’s consumer data privacy and AADC bills were signed into law, and Minnesota is on the cusp of passing a consumer data privacy bill.
Below is the sixteenth weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: Last week, bills advanced in Colorado and California while, with legislatures in multiple states set to close this week, we will know the fate of significant bills in the coming days.
Below is the fifteenth weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: Last week, the Colorado legislature passed a bill amending the Colorado Privacy Act to add provisions regarding biometric data and the California legislature advanced numerous bills.
Below is the fourteenth weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: Last week, the Nebraska Governor signed the Nebraska Data Privacy Act into law, the Maine legislature closed without passing a consumer data privacy bill, Colorado’s biological/neural data bill was signed into law, and there were developments with bills in California, Virginia, Minnesota, Vermont, Wisconsin and Iowa.
Below is the thirteenth weekly update on the status of proposed state privacy legislation in 2024.
Keypoint: Last week, the Nebraska legislature passed a consumer data privacy bill.
Below is the twelfth weekly update on the status of proposed state privacy legislation in 2024.