On June 22, 2025, the Texas governor signed the Texas Responsible Artificial Intelligence Governance Act (TRAIGA or the Act) into law, making Texas the second state to pass comprehensive artificial intelligence (AI)...more
7/22/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Protection Laws ,
Covered Entities ,
Data Privacy ,
Disclosure Requirements ,
Government Agencies ,
Governor Abbott ,
New Legislation ,
Regulatory Requirements ,
State Privacy Laws
On April 21, 2025, Arkansas Governor Sarah Huckabee Sanders signed HB 1717 into law. HB 1717, which will take effect on July 1, 2026, prohibits operators of online services “directed at children” or operators with “actual...more
On March 24, Virginia Governor Glenn Youngkin signed SB 754 into law. SB 754, which will take effect on July 1, 2025, amends the Virginia Consumer Protection Act (VCPA) to prohibit certain entities from, in connection with a...more
While March featured a flurry of newly introduced comprehensive privacy bills, state legislatures now appear to be primarily focused on pushing existing proposals through the chambers. ...more
4/21/2025
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
New Legislation ,
Personal Data ,
Personal Information ,
Privacy Laws ,
Proposed Amendments ,
Proposed Legislation ,
Regulatory Requirements ,
State Privacy Laws
The states bounced back from a somewhat quiet previous biweekly update with several noteworthy developments in the last two weeks. A total of five new state comprehensive privacy bills were introduced in Maine (LD 1224),...more
4/8/2025
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Enforcement Authority ,
New Legislation ,
Privacy Laws ,
Proposed Legislation ,
Regulatory Requirements ,
State Attorneys General ,
State Privacy Laws
As we progress deeper into the 2025 legislative season, comprehensive privacy law proposals continue to progress through the legislative process. In the weeks since our last update, Kentucky amended its comprehensive data...more
3/24/2025
/ Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
New Legislation ,
Privacy Laws ,
Proposed Amendments ,
Proposed Legislation ,
Sensitive Personal Information ,
State Privacy Laws
Many state governments are in the thick of their legislative sessions and we continue to see a steady wave of comprehensive data privacy bills introduced. Most notably last week, Alabama representatives introduced HB 283...more
So far into 2025, we continue to see productivity from state legislatures addressing consumer privacy, with 19 new state comprehensive privacy bills introduced across 10 state legislatures. It is still early in the...more
State legislatures kept busy last year, passing seven new comprehensive privacy laws, and wrapping up 2024 with a total of nineteen state comprehensive laws imposed across the country....more
2024 was another year of substantial legislative and regulatory advances at the international, federal, and state levels with regard to data protection law. Artificial intelligence (AI) regulation continued to hurdle forward...more
1/16/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Department of Justice (DOJ) ,
Enforcement Actions ,
EU ,
Federal Trade Commission (FTC) ,
New Legislation ,
Privacy Laws ,
Proposed Legislation ,
State Attorneys General ,
State Privacy Laws
August 20, 2024 signaled the end of the California Privacy Protection Agency’s (CPPA) Notice of Proposed Regulatory Action (NPRA) comment period for Senate Bill 362, also known as the Delete Act (the “Act”)....more
9/11/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Comment Period ,
Data Brokers ,
Minors ,
New Legislation ,
Personal Data ,
Proposed Regulation ,
Public Comment ,
Public Hearing ,
Registration Requirement ,
Reproductive Healthcare Issues
In the past several weeks, the Minnesota governor has signed into law the Minnesota Consumer Data Privacy Act, while the Vermont Data Privacy Act has been passed by the legislature and awaits the governor’s signature. Both of...more
The 2024 state legislative season is drawing to a close with several notable developments on the comprehensive privacy law front. Since our last update, the Maryland Online Data Privacy Act and Minnesota Consumer Data Privacy...more
As we move closer to the end of many states’ legislative sessions, a number of comprehensive privacy law proposals continue to work their way through the legislative process. Since our last update, Nebraska became the...more
The opening weeks of spring have seen comprehensive privacy law proposals continue to progress in state legislatures across the country. Since our last update, the Kentucky Consumer Data Protection Act (HB 15) received a...more
As we progress deeper into the 2024 legislative session, developments in the comprehensive privacy law arena have continued apace. In the weeks since our last update, New Hampshire formally joined the ranks of states with...more
On March 13, 2024, the European Parliament adopted the Artificial Intelligence Act (AI Act). It is considered to be the world’s first comprehensive horizontal legal framework for AI. It provides for EU-wide rules on data...more
3/15/2024
/ Artificial Intelligence ,
EU ,
European Commission ,
European Parliament ,
Extraterritoriality Rules ,
General Data Protection Regulation (GDPR) ,
Machine Learning ,
Member State ,
New Legislation ,
OECD ,
Risk Assessment ,
Technology Sector
In the weeks since our last update, we have seen continued progress in several state legislatures on comprehensive privacy legislation. Most notably, legislative chambers in West Virginia, Kentucky, and Georgia have passed...more
Following a busy 2023 in which seven states enacted comprehensive privacy laws, we entered this year expecting additional activity on this front across state legislatures. The opening weeks of 2024 have not disappointed. Most...more
On January 8, 2024, the New Jersey Assembly and Senate passed Senate Bill 332 (S. 332, or the “Act”), and it was signed into law by Governor Phil Murphy on January 16. This makes New Jersey the first state to enact a...more
1/18/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Data Processors ,
Data Protection ,
Effective Date ,
Enforcement ,
Enforcement Authority ,
Exemptions ,
Governor Murphy ,
Minors ,
New Legislation ,
Opt-Outs ,
Prior Express Consent ,
Privacy Laws ,
Sensitive Personal Information ,
State Attorneys General ,
State Privacy Laws
On August 9, 2023, India passed a data protection law that will govern how entities who process users’ personal data. The Digital Personal Data Protection Act (“the Act”) will establish guardrails for how organizations should...more
8/21/2023
/ Consent ,
Data Privacy ,
Data Processing Rules ,
Extraterritoriality Rules ,
Fiduciary Duty ,
India ,
International Data Transfers ,
Legislative History ,
New Legislation ,
Personal Data ,
Privacy Laws
On Tuesday, April 11, the Indiana House passed Senate Bill No. 5, a comprehensive state privacy law similar to the ones that are already in effect in California, Colorado, Virginia, Utah and Connecticut. This bill previously...more
The past two weeks have seen continued progress on proposed comprehensive privacy legislation across multiple states. Most notably, on March 28, Iowa Governor Kim Reynolds signed SF 262 into law, officially making Iowa the...more
Since the start of the 2023 legislative session, at least 15 biometric privacy law proposals have emerged across 11 states (including Arizona, Hawaii, Maryland, Massachusetts, Minnesota, Mississippi, Missouri, New York,...more
Employee communications and use of company devices are often key issues in trade secret and related litigation. United States law, for the most part, has been very supportive of an employer’s ability to engage in aggressive...more