Keypoint: Colorado policymakers outlined their privacy and AI priorities at a recent Husch Blackwell event.

In early March, Husch Blackwell hosted a discussion panel covering the 2024 legislative priorities of Colorado policymakers related to privacy and artificial intelligence. Attendees heard from Director of Legislative Affairs and Colorado Assistant Attorney General Jefferey Riester, as well as Colorado State Senate Majority Leader Robert Rodriguez. Discussions centered around their legislative priorities related to privacy and artificial intelligence, including the Colorado Privacy Act, SB 41 (children’s privacy), HB 1058 (biological data), and other impending bills on artificial intelligence.

The below article provides a summary of their remarks.

Continue Reading Summary of Husch Blackwell Hosted Colorado Policymaker Panel on Privacy and AI Legislation

Keypoint: Kentucky is the fifteenth state to pass consumer data privacy legislation with a bill that largely tracks the Virginia Consumer Data Protection Act.

On March 27, 2024, the Kentucky legislature passed the Kentucky Consumer Data Protection Act (HB 15). The bill unanimously passed the House on February 20. The Senate passed the bill on March 11, but with two minor floor amendments. On March 27, the House unanimously concurred in the Senate floor amendments. The bill now heads to Kentucky Governor Andy Beshear. Assuming the bill becomes law, Kentucky will become the fifteenth state to enact consumer data privacy legislation.

The Kentucky bill largely tracks the Virginia Consumer Data Protection Act (VCDPA) but without this year’s VCDPA amendments relating to children’s data. For entities already complying with other non-California privacy laws, the Kentucky bill will not require any additional compliance burdens. The bill does contain small variations from the VCDPA, which we discuss below.

As with prior bills, we have added the Kentucky bill to our chart providing a detailed comparison of laws enacted to date.

Continue Reading Kentucky Legislature Passes Consumer Data Privacy Bill

Keypoint: Since our last update on US artificial intelligence (AI) legislation impacting the private sector, Utah enacted the first AI private sector bill of 2024, Oklahoma moved closer to passing an AI Bill of Rights, Connecticut’s bill advanced through a committee, and California lawmakers introduced two bills that would establish transparency requirements around generative AI and personal information used to train AI models.

Below is our third update on the status of pending US artificial intelligence (AI) legislation that would affect the private sector.

Continue Reading AI Legislation Update: March 26, 2024

Keypoint: Last week, consumer data privacy bills passed out of the Vermont and Pennsylvania Houses, an Age-Appropriate Design Code Act variant bill passed out of the Vermont Senate, and bills advanced in Colorado, Maryland, Minnesota, and Georgia.

Below is the ninth weekly update on the status of proposed state privacy legislation in 2024.

Continue Reading Proposed State Privacy Law Update: March 25, 2024

Keypoint: It was a very busy week with Kentucky on the cusp of passing a consumer data privacy bill, Maryland advancing consumer and children’s bills, and movement on bills in Minnesota, Vermont, Georgia, Maine, and New York.

Below is the eighth weekly update on the status of proposed state privacy legislation in 2024.

Continue Reading Proposed State Privacy Law Update: March 18, 2024

Keypoint: While not as far-reaching as bills under consideration in other states, the Utah bill creates some obligations for private sector companies deploying generative artificial intelligence, including disclosing its use.

In early March, the Utah legislature unanimously passed SB 149. The bill is now with Utah Governor Spencer Cox for signature. In general, the bill: (1) specifies that Utah’s consumer protection laws apply equally to an entity’s use of generative artificial intelligence as they do to the entity’s other activities, (2) requires private sector entities to take steps to disclose and/or respond to inquiries about their use of generative artificial intelligence, and (3) creates the Office of Artificial Intelligence Policy which is charged with, among other things, administering an artificial intelligence learning laboratory program. Once signed by the Governor, the law will go into effect on May 1, 2024.

In the below article, we provide a brief analysis of the bill’s provisions.

Continue Reading Utah Legislature Passes Private Sector AI Bill

Keypoint: The European Parliament voted to approve the EU’s Artificial Intelligence Act and it will enter force 20 days after publication in the EU Official Journal.

On March 13, 2024, the European Parliament voted to approve the European Union’s Artificial Intelligence Act (commonly referred to as the EU AI Act). The vote, originally scheduled for April of 2024, was moved up by one month after all relevant parties reached agreement on the text of the Act. Following this final vote, the EU AI Act will “enter into force” 20 days after publication in the EU Official Journal, which typically occurs within a few days of an affirmative vote and starts the relevant compliance timelines within the EU AI Act.

Continue Reading EU Parliament Approves EU AI Act

Keypoint: The Utah legislature repealed and replaced the Utah Social Media Act in response to a lawsuit challenging the law on constitutional grounds.

Prior to closing in early March, the Utah legislature passed two bills (SB 194 and HB 464) that repeal and replace the Utah Social Media Regulation Act, which the legislature passed just last year. The bills are the second part of a legislative process in which Utah lawmakers amended the Act in response to a lawsuit filed by an Internet trade association challenging the Act on constitutional grounds. The Utah legislature previously pushed back the Act’s effective date to delay the legal challenge while lawmakers worked to revise the Act. In the below article, we provide a brief background on the Act and then discuss the changes made by the two bills.

Continue Reading Utah Legislature Repeals and Replaces Utah Social Media Regulation Act

Keypoint: Last week, consumer data privacy bills advanced in Minnesota, Maryland, and Missouri, New Hampshire’s Governor signed SB 255 into law, Maryland’s AADC bill advanced in the Senate, and the Hawaii House passed a consumer health data privacy bill.

Below is the seventh weekly update on the status of proposed state privacy legislation in 2024.

Continue Reading Proposed State Privacy Law Update: March 11, 2024