Data Privacy legislation in Pennsylvania
Every bill in the Pennsylvania Legislature that falls inside the Data Privacy Legislation Tracker's scope, with where each one currently stands.
23
Bills in Scope
9
Past Committee
10 July 2026
Most Recent Action
Data Privacy bills in Pennsylvania
9Past committee
14Introduced or inactive
23 bills in scope
Past committee
9
HB 78An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.25 June 2026Passed chamberSB 378An Act amending Title 24 (Education) of the Pennsylvania Consolidated Statutes, in preliminary provisions, providing for student data privacy and protection; conferring powers and imposing duties on the Department of Education; and imposing penalties.3 June 2026Passed committeeHB 1834An Act providing for the regulation of commercial data centers;
imposing duties on the Pennsylvania Public Utility
Commission, the Department of Human Services and the
Pennsylvania Energy Development Authority; establishing the
Data Center Low-Income Home Energy Assistance Program
Enhancement Account and the Pennsylvania Energy Independence
Account; providing for clean firm energy requirements,
contract filing, commission review, disclosure requirements,
backup generation standards, curtailment standards and
certification and expedited interconnection for commercial
data centers bringing incremental clean firm energy
resources; and imposing penalties.31 March 2026Passed chamberSB 1090An Act providing for disclosures and safeguards relating to the use of artificial intelligence; and imposing duties on the Attorney General.18 March 2026Passed chamberHB 1530An Act providing for duties of direct-to-consumer genetic testing companies and for prohibition on disclosure of genetic data of consumers; and imposing civil penalties.22 December 2025Passed chamberHB 1822An Act amending Title 44 (Law and Justice) of the Pennsylvania Consolidated Statutes, providing for protection of personal data of certain public servants; imposing duties on data brokers regarding personal data; and providing for civil enforcement.27 October 2025Passed committeeHB 755An Act providing for health care insurance preventive services coverage protections; conferring authority on the Insurance Department and the Insurance Commissioner; and providing for regulations, for enforcement and for penalties.25 March 2025Passed chamberHB 618An Act providing for health insurance access protections; imposing duties on the Insurance Department and the Insurance Commissioner; and imposing penalties.25 March 2025Passed chamberHB 535An Act providing for health care insurance coverage protections; imposing duties on the Insurance Department and the Insurance Commissioner; and imposing penalties.25 March 2025Passed chamber
Introduced or inactive
14
SB 1396An Act amending Title 44 (Law and Justice) of the Pennsylvania Consolidated Statutes, in preliminary provisions, providing for public servant data privacy.10 July 2026In committeeHB 2666An Act providing for limitations on the use of user data in the creation of artificial intelligence simulations and for private right of action; and imposing penalties.24 June 2026In committeeSB 1349An Act providing for transparency in use of generative artificial intelligence; requiring disclosure of synthetic content; providing for establishment of content verification tools; imposing duties on the Bureau of Consumer Protection in the Office of Attorney General; and imposing penalties.4 June 2026In committeeSB 1333An Act prohibiting employers from using consumer reporting under certain circumstances; and providing for enforcement.21 May 2026In committeeHB 2515An Act providing for commercial data center transparency regarding energy use, water use and noise pollution; imposing duties on the Department of Environmental Protection, the Department of Transportation and the Office of Attorney General; and imposing civil penalties.13 May 2026In committeeHB 2108An Act providing for duties of covered entities to protect the best interests of children that use online services, products or features and for data protection impact assessments; prohibiting certain actions by covered entities; and imposing penalties.18 December 2025In committeeHB 1942An Act providing for prohibition on surveillance pricing; and imposing penalties.16 October 2025In committeeHB 1857An Act requiring business entities to disclose the use of artificial intelligence in certain consumer interactions; establishing the right of consumers to human review in high-impact decisions; and providing for enforcement by Attorney General.10 September 2025In committeeHB 1804An Act providing for the withholding of Commonwealth payments to the Federal Government; perfecting liens on Federal property; establishing a civil cause of action; and prohibiting the Commonwealth from sharing data with the Federal Government that contains personally identifiable information.15 August 2025In committeeHB 1624An Act prohibiting certain covered entities and service providers from collecting and processing location information of individuals without consent; providing for enforcement by Attorney General; establishing a private right of action; and prescribing penalties.20 June 2025In committeeHB 1448An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in preliminary provisions, providing for financial transparency data and reporting system.13 May 2025In committeeHB 1179An Act providing for privacy, transparency and compensation regarding the disclosure of information collected by genetic material testing entities.9 April 2025In committeeSB 112An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.21 March 2025In committeeHB 596An Act providing for a requirement for commercial establishments to disclose the use and collection of biometric identifier information and providing for a private cause of action.12 February 2025In committee
Bill titles link to the Pennsylvania Legislature's own page.
Coverage depth varies by jurisdiction. How this is measured, and where it is thinner.
What's In Scope
How Data Privacy Legislation bills are selected
In scope is any bill creating or amending duties over personal information: consumer rights of access, deletion, correction and opt-out; sale and sharing definitions; sensitive and biometric identifiers; breach notification timing and content; data broker registration; and the exemptions and thresholds that decide who is covered at all.
Scope is defined by a written topic profile that every bill is measured against. The profiles are drafted by a model and validated by retrieval measurement against a judged set of bills, not reviewed by an attorney. LawSignals is a research tool and does not provide legal advice.
Data Privacy legislation in other jurisdictions
48 more currently hold bills in this tracker
- New Jersey34
- Massachusetts33
- Illinois30
- Virginia27
- Connecticut26
- Montana24
- New York24
- California23
- Minnesota23
- Vermont14
- Hawaii13
- Rhode Island12
- Maryland10
- Iowa9
- Texas9
- West Virginia8
- North Carolina7
- Oklahoma7
- South Carolina7
- Utah7
- Washington7
- Arizona6
- Missouri6
- Mississippi6
- New Mexico6
- Alabama5
- Kentucky5
- Michigan5
- New Hampshire5
- Oregon5
- Wisconsin5
- Florida4
- Nebraska4
- Tennessee4
- Colorado3
- Georgia3
- Nevada3
- Congress3
- Alaska2
- Delaware2
- Idaho2
- Louisiana2
- Maine2
- Arkansas1
- Kansas1
- Ohio1
- South Dakota1
- Wyoming1
Pennsylvania is one of Data Privacy Legislation's jurisdictions
The tracker follows this subject everywhere it is legislated, and publishes a monthly issue on what moved across all of them.