Data Privacy Legislation Tracker
Nineteen state privacy regimes, and the differences are the whole job
A curated tracker for consumer privacy, biometric and breach legislation, with a monthly issue that says what changed and where.
Bills in Scope
Jurisdictions
Past Committee
The Problem
Comparison Charts Describe The Law That Passed
The comprehensive privacy statutes are the easy part. They are published, summarised and compared everywhere. What nobody hands you is the amendment filed in week six that narrows an exemption your client relies on.
Your exposure is in the pending bill
Every vendor's fifty-state chart is a picture of enacted law. The risk is in the bill that has not passed yet: the one adding a private right of action, dropping the revenue threshold, or extending a definition to cover inferred data.
Biometrics arrive in other people's bills
They rarely sit inside a comprehensive privacy bill. They arrive in a health bill, an insurance bill, a schools bill, a corrections bill. Following privacy by committee assignment loses them entirely.
Nineteen regimes means nineteen calendars
Sessions open and adjourn at different times, most of them between January and May. The month a statute is amended is rarely the month anyone writes about it.
What's In Scope
Defined in writing, measured against every bill
In scope is any bill creating or amending duties over personal information: consumer rights of access, deletion, correction and opt-out; sale and sharing definitions; sensitive and biometric identifiers; breach notification timing and content; data broker registration; and the exemptions and thresholds that decide who is covered at all.
What this tracker does not cover
State administrative codes and agency guidance are out of scope. Federal rulemaking arrives through Regulatory Watch, which reads the Federal Register and nothing else, permanently.
Scope is defined by a written topic profile that every bill is measured against. The profiles are drafted by a model and validated by retrieval measurement against a judged set of bills, not reviewed by an attorney. LawSignals is a research tool and does not provide legal advice.
Live From The Tracker
What's at the top of the Data Privacy Legislation feed
The real feed, ranked the way a subscriber sees it: how far a bill has moved first, then how recently. Nothing here is a sample.
Matched through 12 August 2026
56Enacted
3Cleared both chambers
103Past committee
308Introduced or inactive
470 bills in scope
Enacted
25 of 56 shown
Showing the 25 furthest along of 470. Sign up to see the full list →
The Monthly Issue
The document you forward to a client
Read a full issue before you decide anything. It was generated from the corpus, so every bill in it is real and you can check one.
Read the June 2026 issueA real generated document, not a mockup.
The month in one paragraph
What actually happened, written rather than counted.
What moved
Every bill that advanced, grouped by how far, one line each.
Enacted
What became law, and the effective date where the text states one.
Regulatory Watch
Federal rulemaking on the same subject, led by comment deadlines.
By Jurisdiction
Data Privacy Legislation legislation, state by state
49 jurisdictions currently hold bills in this tracker
- New Jersey34
- Massachusetts33
- Illinois30
- Virginia27
- Connecticut26
- Montana24
- New York24
- California23
- Minnesota23
- Pennsylvania23
- Vermont14
- Hawaii13
- Rhode Island12
- Maryland10
- Iowa9
- Texas9
- West Virginia8
- North Carolina7
- Oklahoma7
- South Carolina7
- Utah7
- Washington7
- Arizona6
- Missouri6
- Mississippi6
- New Mexico6
- Alabama5
- Kentucky5
- Michigan5
- New Hampshire5
- Oregon5
- Wisconsin5
- Florida4
- Nebraska4
- Tennessee4
- Colorado3
- Georgia3
- Nevada3
- Congress3
- Alaska2
- Delaware2
- Idaho2
- Louisiana2
- Maine2
- Arkansas1
- Kansas1
- Ohio1
- South Dakota1
- Wyoming1
Track Data Privacy Legislation in your dashboard
One tracker is the entry plan. Every plan starts with a free trial, and the trial includes a real issue rather than a sample of one.
Frequently Asked Questions
What does this tracker cover?
Consumer privacy rights and their exemptions, sale and sharing definitions, sensitive and biometric identifiers, breach notification timing and content, and data broker registration, across US state legislatures and Congress.
Does it include enacted law, or only pending bills?
Pending legislation is the focus, because that is what the enacted-law tools you already have are worst at. Enacted bills appear in the monthly issue with their effective date where the text states one.
How do biometric bills get caught if they are filed as health or schools bills?
Matching is on the duty a bill creates, not on its committee or its title. A schools bill that regulates a biometric identifier is scored against the same profile as a comprehensive privacy bill.
Who decides what is relevant?
A written topic profile, drafted by a model and validated by retrieval measurement against a judged set of bills. It is not reviewed by an attorney.
LawSignals is a research tool. It does not provide legal advice. Always consult qualified legal counsel.