Data Privacy Legislation Tracker

Live tracker for consumer privacy, biometric data, and data breach legislation across the US. Covers state CCPA-style frameworks, sectoral bills (health, children, employee data), and federal privacy proposals.

We're tracking 321 data-privacy bills across 43 jurisdictions.

This week's featured data privacy bills

GASB 111signed

"Georgia Consumer Privacy Protection Act"; enact

This bill amends the definition of a rural hospital organization to include hospitals that provide inpatient services in rural counties and accept Medicaid and Medicare patients. It also requires these organizations to file IRS Form 990 with the state department and have a certain percentage of their revenue categorized as indigent care.

For legal practitioners tracking data privacy legislation, this bill's focus on hospital eligibility and requirements may have implications for healthcare providers' data collection and sharing practices. The revised definition of rural hospital organization could lead to increased scrutiny of patient data protection policies, particularly in the context of Medicaid and Medicare patients. Additionally, the requirement to file IRS Form 990 may raise questions about the handling of sensitive patient information.

Track this bill →
CAAB 1337passed chamber

Information Practices Act of 1977.

AB 1337 would recast provisions related to personal information collection and disclosure by state agencies, removing exemptions for local agencies and revising the definition of personal information. The bill would also require agencies to establish rules of conduct for personnel involved in record maintenance and prohibit using records for purposes other than those for which they were collected.

For legal practitioners tracking data privacy legislation, this bill has significant implications. It expands the scope of existing crimes related to information disclosure and imposes new requirements on state agencies. The revised definition of personal information may have far-reaching consequences for businesses and individuals handling sensitive data. Additionally, the bill's provisions on agency rules and record maintenance could impact compliance strategies for organizations operating in California.

Track this bill →
CAAB 710passed chamber

Electrical corporations: microgrid projects.

This bill aims to accelerate the development and procurement of resources that don't emit greenhouse gases to bolster electrical grid reliability and resiliency. It requires large electrical corporations to collaborate with local governments and provide data to support microgrid projects, which would help ensure uninterrupted electrical service to critical facilities and infrastructure.

For legal practitioners tracking Data Privacy Legislation Tracker, this bill has significant implications for the handling of sensitive customer information. The bill's provisions on data sharing and confidentiality may impact how large electrical corporations and local governments handle personal identifiable information, potentially affecting their compliance with existing data protection laws and regulations.

Track this bill →

This week in Data Privacy Legislation

8
New bills this week
2
Status changes
5
Amended
0
Introduced (last 7 days)

Recent activity

Showing the most recent 15 of 321 tracked data privacy bills. Sign up to see the full list →

Track data privacy bills in your dashboard

Get real-time alerts on new data privacy bills, status changes, and amendments across all 50 states and Congress.

Start free trial →

Related trackers

Frequently Asked Questions

What kinds of bills does this tracker include?

Any bill mentioning consumer privacy, personal information, biometric data, data breach notification, sensitive data, or related concepts. Includes comprehensive state privacy laws (CCPA-style), sectoral bills (health, children, employee data), and federal proposals.

How is this different from a CCPA/CPRA / state privacy law roundup?

Roundups list passed laws. This tracker shows every active bill — including ones still in committee — across all 50 states. Useful for legal teams needing forward-looking visibility, not just enacted-law reference.

Are international privacy laws (GDPR, etc.) included?

No. Coverage is limited to US state legislatures and Congress. International references inside US bills (e.g., bills citing GDPR for context) are still indexed.