LawSignals
September 2025
Consumer data privacy, biometric identifiers, and data broker regulation.
| Measure | Bills |
|---|---|
| Matched to this Tracker | 470 |
| New this month | 4 |
| Moved a stage | 4 |
| Passed a chamber | 3 |
| Enacted | 0 |
| Vetoed | 0 |
| State | Bills that moved |
|---|---|
| CA | 2 |
| MA | 1 |
| MI | 1 |
September 2025 brought modest activity to data privacy legislation, with four bills advancing across three states. California led with two bills passing one chamber: AB 566, addressing opt-out preference signals under the California Consumer Privacy Act, and SB 361, concerning data broker collection and deletion practices. Michigan saw HB 4024, a facility-access bill framed around student privacy, pass one chamber. Massachusetts moved forward on comprehensive data privacy reform when S 2516 was reported favorably out of committee with a substitute draft.
| State | Bill | Title | Current status | Action |
|---|---|---|---|---|
| CA | AB 566 | California Consumer Privacy Act of 2018: opt-out preference signal. | Enacted | 10 September 2025 |
| Addresses opt-out preference signals under California's consumer privacy law. Passed one chamber. | ||||
| CA | SB 361 | Data brokers: data collection and deletion. | Enacted | 10 September 2025 |
| Regulates data broker collection practices and deletion requirements. Passed one chamber unanimously. | ||||
| MI | HB 4024 † | Civil rights: privacy; restriction of student access to certain restrooms and changing areas based on biological sex; provide for. Creates new act. | Passed chamber | 4 September 2025 |
| Restricts student restroom and changing-area access based on biological sex. Passed one chamber. | ||||
| State | Bill | Title | Current status | Action |
|---|---|---|---|---|
| MA | S 2516 | An Act establishing the Massachusetts data privacy act Companion: MA H 78, MA HD 2135 | Passed committee | 18 September 2025 |
| Comprehensive data privacy framework for Massachusetts. Reported favorably from committee with a substitute draft. | ||||
| State | Bill | Title | Current status |
|---|---|---|---|
| MA | S 2608 | An Act establishing the Massachusetts data privacy act Companion: MA S 2619 | Floor vote |
| PA | HB 1834 † | An Act providing for the regulation of commercial data centers;
imposing duties on the Pennsylvania Public Utility
Commission, the Department of Human Services and the
Pennsylvania Energy Development Authority; establishing the
Data Center Low-Income Home Energy Assistance Program
Enhancement Account and the Pennsylvania Energy Independence
Account; providing for clean firm energy requirements,
contract filing, commission review, disclosure requirements,
backup generation standards, curtailment standards and
certification and expedited interconnection for commercial
data centers bringing incremental clean firm energy
resources; and imposing penalties. Companion: PA SB 1323 | Passed chamber |
| MA | HD 5114 | An Act to protect privacy of motor vehicle owners and operators from electronic spying | In committee |
| PA | HB 1857 † | An Act requiring business entities to disclose the use of artificial intelligence in certain consumer interactions; establishing the right of consumers to human review in high-impact decisions; and providing for enforcement by Attorney General. | In committee |
| Type | Document | Date |
|---|---|---|
| Proposed Rule | GENIUS Act Implementation Treasury Department ANPRM on stablecoins regulation mentions consumer protection and potential regulatory regime including AML/sanctions obligations. | Comments close 20 October 2025 |
| Type | Document | Date |
|---|---|---|
| Presidential Document | Saving TikTok While Protecting National Security Executive Office of the President Executive order regulating foreign adversary controlled applications including data collection and national security concerns about user information handling. | 30 September 2025 |
| State | Bill | Title | Current status |
|---|---|---|---|
| MA | S 2516 | An Act establishing the Massachusetts data privacy act Companion: MA H 78, MA HD 2135 | Passed committee |
| MI | HB 4024 † | Civil rights: privacy; restriction of student access to certain restrooms and changing areas based on biological sex; provide for. Creates new act. | Passed chamber |
| State | Bill | Title | Current status | Last action |
|---|---|---|---|---|
| AK | HB 367 | An Act relating to the privacy of consumer personal information; establishing the Consumer Personal Information Privacy Act; establishing data broker registration requirements; relating to social security numbers; making certain violations unfair or deceptive trade practices; and providing for an effective date. | In committee | 12 May 2026 |
| AK | HJR 28 | Calling on the United States Congress to pass the Kids Online Safety Act. | Sent to governor | 17 June 2026 |
| AL | HB 283 | Data privacy, processing of data regulated, consumer actions related to data authorized | Passed chamber | 24 April 2025 |
| AL | HB 351 | Data privacy; processing of data regulated, consumer actions related to data authorized | Enacted | 17 April 2026 |
| AL | HB 436 | Biological and neural data; certain disclosures, transfers, and use by a covered entity prohibited unless consumer provides express consent, Attorney General authorized to enforce, civil penalties provided | In committee | 18 March 2025 |
| AL | HB 470 | Consumer protection, protection of personally identifiable information further provided for, civil and criminal liability established | In committee | 20 March 2025 |
| AL | SB 223 | Aviation; restrict the use of Automatic Dependent Surveillance-Broadcast data collected from aircraft | In committee | 29 January 2026 |
| AR | HB 1082 | TO CREATE THE ARKANSAS CHILDREN AND TEENS’ ONLINE PRIVACY PROTECTION ACT. | In committee | 11 March 2025 |
| AZ | HB 2489 | difference in pricing; prohibition; penalty | In committee | 21 January 2026 |
| AZ | HB 2737 | chatbot regulations; personal data; requirements | In committee | 21 January 2026 |
| AZ | SB 1193 † | personal identifying information; disclosure; prohibition | Signed | 19 June 2026 |
| AZ | SB 1717 | biometric identifiers; commercial use; prohibitions | In committee | 9 February 2026 |
| AZ | SB 1790 | personal data collection; business; requirements | In committee | 10 February 2026 |
| AZ | SB 1815 | personal data; consumers; controllers; requirements | In committee | 10 February 2026 |
| CA | AB 1170 | Maintenance of the codes. | Enacted | 28 July 2025 |
| CA | AB 1300 | State and local government: data protection and privacy: immigration. | Dead | 2 February 2026 |
| CA | AB 1355 | Location privacy. | Dead | 2 February 2026 |
| CA | AB 1542 | Sensitive personal information. | Passed chamber | 13 August 2026 |
| CA | AB 1878 | Data collection: race and ethnicity. | Passed committee | 14 May 2026 |
| CA | AB 2092 | Early Childhood Integrated Data System. | Passed committee | 14 May 2026 |
| CA | AB 2154 | Mortgage applicants. | In committee | 9 March 2026 |
| CA | AB 2169 | Social media platforms: artificial intelligence models. | Passed committee | 14 May 2026 |
| CA | AB 2246 | Online service, product, or feature: access by children. | Passed chamber | 13 August 2026 |
| CA | AB 2561 | Operating systems and applications: privacy settings. | Passed chamber | 10 June 2026 |
| CA | AB 322 | Precise geolocation information. | Dead | 13 August 2026 |
| CA | AB 364 | Personal information: maintenance. | Dead | 2 February 2026 |
| CA | AB 446 | Surveillance pricing. | Passed chamber | 10 September 2025 |
| CA | AB 566 | California Consumer Privacy Act of 2018: opt-out preference signal. | Enacted | 8 October 2025 |
| CA | AB 883 | Data brokers: accessible deletion mechanism: deletion of personal information of elected officials and judges. | Passed chamber | 13 August 2026 |
| CA | SB 1104 | California Consumer Privacy Act of 2018: data broker registration: accessible deletion mechanism. | Passed committee | 14 May 2026 |
| CA | SB 259 | Fair Online Pricing Act. | Passed chamber | 12 September 2025 |
| CA | SB 354 | Insurance Information and Privacy Protection Act. | Passed chamber | 13 August 2026 |
| CA | SB 361 | Data brokers: data collection and deletion. | Enacted | 8 October 2025 |
| CA | SB 435 | California Consumer Privacy Act of 2018: personal information: exemptions. | Dead | 13 August 2026 |
| CA | SB 44 | Brain-computer interfaces: neural data. | Dead | 2 February 2026 |
| CA | SB 468 | High-risk artificial intelligence systems: duty to protect personal information. | Dead | 2 February 2026 |
| CA | SB 923 | Consumer privacy requests: deletion request records and request submission methods. | Passed chamber | 13 August 2026 |
| CO | HB 1091 | Homeowner's Insurance Data Privacy Protections | Introduced | 11 March 2026 |
| CO | HB 1210 | Prohibit Surveillance Price & Wage Setting | Vetoed | 3 June 2026 |
| CO | HB 25-1264 | Prohibit Surveillance Data to Set Prices and Wages | Introduced | 22 April 2025 |
| CT | HB 5162 † | AN ACT CONCERNING MOTOR VEHICLE DATA PRIVACY AND VICTIMS OF DOMESTIC VIOLENCE. | In committee | 6 February 2025 |
| CT | HB 5163 † | AN ACT CONCERNING MOTOR VEHICLE DATA PRIVACY. | In committee | 14 January 2025 |
| CT | HB 5208 † | AN ACT CONCERNING DATA SECURITY, PAYROLL PROCESSING, CONSUMER FRAUD PROTECTION, MORTGAGE LOANS AND EMPLOYEE CREDIT RATES. | Signed | 27 May 2026 |
| CT | HB 5210 † | AN ACT ESTABLISHING VARIOUS DATA SECURITY REQUIREMENTS APPLICABLE TO CERTAIN FINANCIAL INSTITUTIONS. | Passed committee | 24 March 2026 |
| CT | HB 5222 † | AN ACT CONCERNING CONSUMER PROTECTION, CANNABIS, DATA PRIVACY, FIRE INSPECTIONS, CRIMINAL MISCHIEF AND ARTIFICIAL INTELLIGENCE. | Signed | 2 June 2026 |
| CT | HB 5353 † | AN ACT REQUIRING DATA TRANSPARENCY FOR SELF-DIRECTED HOME CARE PROGRAMS. | Passed committee | 15 April 2026 |
| CT | HB 5502 † | AN ACT CLASSIFYING CERTAIN DATA BROKERS AS CREDIT RATING AGENCIES. | In committee | 21 January 2025 |
| CT | HB 5744 † | AN ACT PROHIBITING CERTAIN BUSINESS CONDUCT REGARDING STORAGE OF CONSUMERS' CREDIT CARD AND DEBIT CARD INFORMATION. | In committee | 14 February 2025 |
| CT | HB 5950 † | AN ACT CONCERNING THE APPOINTMENT OF A CONSUMER PROTECTION ADVOCATE TO THE PUBLIC UTILITIES REGULATORY AUTHORITY. | In committee | 22 January 2025 |
| CT | HB 6002 † | AN ACT SUBJECTING STATE AGENCIES TO THE SAME DATA PROTECTION AND PRIVACY LAWS AS THE PRIVATE SECTOR. | Passed committee | 14 April 2025 |
| CT | HB 6060 † | AN ACT CONCERNING HEALTH DATA. | In committee | 22 January 2025 |
| CT | HB 6422 † | AN ACT CONCERNING THE USE OF GEOGRAPHIC INFORMATION SYSTEMS DATA. | In committee | 14 February 2025 |
| CT | HB 6497 † | AN ACT PROHIBITING RESIDENTIAL RENTAL PROPERTY OWNERS FROM USING PRICING ALGORITHMS AND COMPETITORS' SENSITIVE DATA TO SET RENTAL PRICES. Companion: CT HB 6947 | In committee | 24 January 2025 |
| CT | SB 117 † | AN ACT CONCERNING BREACHES OF SECURITY INVOLVING ELECTRONIC PERSONAL INFORMATION. | Passed chamber | 30 April 2026 |
| CT | SB 1295 † | AN ACT CONCERNING BROADBAND INTERNET, GAMING, SOCIAL MEDIA, ONLINE SERVICES AND CONSUMER CONTRACTS. | Signed | 24 June 2025 |
| CT | SB 1356 † | AN ACT CONCERNING DATA PRIVACY, ONLINE MONITORING, SOCIAL MEDIA, DATA BROKERS AND CONNECTED VEHICLE SERVICES. | Passed chamber | 16 May 2025 |
| CT | SB 1382 † | AN ACT CONCERNING SCHOOL MAPPING DATA SERVICES. | Passed chamber | 2 June 2025 |
| CT | SB 1431 † | AN ACT IMPLEMENTING THE RECOMMENDATIONS OF THE OFFICE OF POLICY AND MANAGEMENT CONCERNING DATA GOVERNANCE. | Passed committee | 10 April 2025 |
| CT | SB 146 † | AN ACT PROHIBITING CERTAIN SALES OF CONSUMERS' GENETIC INFORMATION. | In committee | 8 January 2025 |
| CT | SB 3 † | AN ACT CONCERNING CONSUMER PROTECTION AND SAFETY. | Signed | 10 June 2025 |
| CT | SB 344 † | AN ACT PROTECTING CHILDREN'S SAFETY BY REQUIRING AFFIRMATIVE CONSENT BY A PARENT OR GUARDIAN FOR THE USE OF A CHILD'S LIKENESS ON SOCIAL MEDIA. | Passed committee | 17 March 2026 |
| CT | SB 375 † | AN ACT CONCERNING SCHOOL MAPPING DATA SERVICES. | Signed | 4 June 2026 |
| CT | SB 384 † | AN ACT REDEFINING "EXECUTIVE BRANCH AGENCY" FOR PURPOSES OF DATA GOVERNANCE. | Passed chamber | 30 April 2026 |
| CT | SB 397 † | AN ACT CONCERNING DEMOCRACY AND GOVERNMENT ACCOUNTABILITY AND THE USE AND RETENTION OF DATA DERIVED FROM AUTOMATED LICENSE PLATE READER SYSTEMS. | Signed | 6 May 2026 |
| CT | SB 4 † | AN ACT CONCERNING CONSUMER PRIVACY AND PROTECTION. | Signed | 27 May 2026 |
| CT | SB 92 † | AN ACT CONCERNING PROTECTIONS FOR THE ONLINE ECONOMY AGAINST DATA BREACHES AND LIMITS ON INTERNET DATA USAGE. | In committee | 14 February 2025 |
| DE | HB 380 | AN ACT TO AMEND TITLE 6 OF THE DELAWARE CODE RELATING TO PERSONAL DATA PRIVACY. | Passed chamber | 16 June 2026 |
| DE | HB 60 † | AN ACT TO AMEND TITLE 21 OF THE DELAWARE CODE RELATING TO DIVISION OF MOTOR VEHICLES DATA PRIVACY. | Passed committee | 9 April 2025 |
| FL | HB 1027 | Disclosure of Public Servants' Personal Information Companion: FL SB 1064 | Dead | 13 March 2026 |
| FL | HB 1223 | Student Online Personal Information Protection | Dead | 16 June 2025 |
| FL | HB 1557 | Motor Vehicle Data Privacy and Autonomy | Dead | 13 March 2026 |
| FL | SB 1610 | Disclosure of Public Servants’ Personal Information | Dead | 16 June 2025 |
| GA | HB 827 | Menstrual Data Privacy and Protection Act; enact | In committee | 28 March 2025 |
| GA | HR 1791 | Federal government; establish a national data protection authority; urge | In committee | 23 March 2026 |
| GA | SB 495 | "Age-Appropriate Design Code Act"; enact | In committee | 12 February 2026 |
| HI | HB 1753 | RELATING TO SOCIAL MEDIA. | Enacted | 14 July 2026 |
| HI | HB 2040 | RELATING TO PROTECTION OF MINORS. Companion: HI HB 566 | In committee | 28 January 2026 |
| HI | HB 2136 | RELATING TO CONSUMER PROTECTION. | In committee | 30 January 2026 |
| HI | HB 2463 | RELATING TO CONSUMER PRIVACY. | In committee | 3 February 2026 |
| HI | HB 566 | RELATING TO PROTECTION OF MINORS. | In committee | 21 January 2025 |
| HI | SB 1037 | RELATING TO CONSUMER DATA PROTECTION. | In committee | 4 February 2025 |
| HI | SB 1037 | RELATING TO CONSUMER DATA PROTECTION. | In committee | 8 December 2025 |
| HI | SB 1038 | RELATING TO PRIVACY. | Passed chamber | 19 March 2025 |
| HI | SB 1038 | RELATING TO PRIVACY. | Passed chamber | 8 December 2025 |
| HI | SB 1163 | RELATING TO PRIVACY. Companion: HI SB 3017 | Passed chamber | 12 March 2026 |
| HI | SB 1163 | RELATING TO PRIVACY. | In committee | 27 January 2025 |
| HI | SB 1286 | RELATING TO MOTOR VEHICLES. | Passed chamber | 8 December 2025 |
| HI | SB 1286 | RELATING TO MOTOR VEHICLES. | Passed committee | 25 February 2025 |
| IA | HF 2048 | A bill for an act relating to personal data processing practices for companies, and making civil penalties applicable. | In committee | 14 January 2026 |
| IA | HF 2469 | A bill for an act prohibiting the use of an automated decision-making system to alter the price of a product or service for a specific individual based on surveillance data, and providing civil penalties. | In committee | 16 February 2026 |
| IA | HF 503 | A bill for an act relating to consumer data protection, and including retroactive applicability provisions. | In committee | 20 February 2025 |
| IA | SF 143 † | A bill for an act relating to consumer data protection, and including retroactive applicability provisions. | Passed committee | 30 January 2025 |
| IA | SF 2278 | A bill for an act prohibiting personalized algorithmic pricing and surveillance pricing at certain food retail establishments, and providing civil penalties. | In committee | 12 February 2026 |
| IA | SF 259 † | A bill for an act limiting the release of personal information for traffic violations observed by an out-of-state traffic camera, making penalties applicable, and including effective date provisions. | Passed chamber | 26 March 2026 |
| IA | SF 289 † | A bill for an act relating to invasion of privacy, and making penalties applicable. | Passed chamber | 31 March 2025 |
| IA | SSB 3085 † | A bill for an act relating to private entity requirements concerning biometric data, and providing civil penalties. | Passed committee | 4 February 2026 |
| IA | SSB 3086 † | A bill for an act relating to consumer fraud and unlawful practices, including digital financial asset transaction kiosks, and providing civil penalties. | Passed committee | 11 February 2026 |
| ID | H 744 | BIOMETRIC IDENTIFIERS – Adds to existing law to establish provisions regarding the capture or use of biometric identifiers. | Introduced | 23 February 2026 |
| ID | S 1374 | IDAHO CHILD CARE PROGRAM – Amends and adds to existing law to establish the Idaho Child Care Program. | Introduced | 9 March 2026 |
| IL | HB 2534 | LIFE INSURANCE-GENETIC INFO | In committee | 21 March 2025 |
| IL | HB 2593 | BIPA-IDOT TESTING VEHICLES | In committee | 21 March 2025 |
| IL | HB 2838 | BIPA-SECURITY PURPOSES Companion: IL HB 3667, IL SB 3122 | In committee | 27 March 2026 |
| IL | HB 2866 † | BIPA-ACTION APPLICABILITY | In committee | 21 March 2025 |
| IL | HB 2913 | DATA BROKER REGISTER/DELETION Companion: IL HB 4809 | In committee | 21 March 2025 |
| IL | HB 2984 | BIPA-NEURAL DATA | In committee | 27 March 2026 |
| IL | HB 3041 | DATA PRIVACY AND PROTECTION | In committee | 27 March 2026 |
| IL | HB 3487 | BHWC DATA COLLECTION | Enacted | 15 August 2025 |
| IL | HB 3494 | HEALTH DATA PRIVACY ACT Companion: IL SB 2273 | In committee | 30 May 2026 |
| IL | HB 3712 | PRIVACY PROTECTION-LOCATION Companion: IL SB 2121 | In committee | 11 April 2025 |
| IL | HB 4248 | ALGORITHMIC PRICE TRANSPARENCY | Passed chamber | 1 June 2026 |
| IL | HB 4544 | ALGORITHMIC PRICING | Introduced | 18 February 2026 |
| IL | HB 4789 | AUTOMATED DRIVING SYSTEMS Companion: IL HB 5103, IL SB 3308 | In committee | 27 March 2026 |
| IL | HB 4985 | SURVEILLANCE-BASED PRICING | In committee | 27 March 2026 |
| IL | HB 4987 | SURVEILLANCE-BASED WAGES | In committee | 27 March 2026 |
| IL | HB 5221 | CONSUMER DATA PRIVACY ACT | In committee | 27 March 2026 |
| IL | HB 5521 | BIOMETRIC SURVEILLANCE ACT | In committee | 9 April 2026 |
| IL | SB 1239 | SCH CD-STUDENT BIOMETRIC INFO | In committee | 11 April 2025 |
| IL | SB 1300 | UNIFORM CRIME REPORT-HOMICIDES | In committee | 21 May 2025 |
| IL | SB 1858 | PRIVACY CRIM JUSTICE DATA | In committee | 22 May 2026 |
| IL | SB 2255 | SURVEILLANCE DISCRIMINATION | In committee | 26 May 2026 |
| IL | SB 3180 | AI DATA PRIVACY ACT | In committee | 22 May 2026 |
| IL | SB 3219 | PERSONAL INFO-BROKER REGISTRY | In committee | 22 May 2026 |
| IL | SB 3220 | CONSUMER DATA PRIVACY | In committee | 22 May 2026 |
| IL | SB 3241 | AGE-APPROPRIATE DESIGN CODE Companion: IL SB 50 | In committee | 22 May 2026 |
| IL | SB 333 † | CIVIL LAW-TECH | In committee | 2 June 2025 |
| IL | SB 3603 | CONSUMERS–DATA PROCESSING | In committee | 22 May 2026 |
| IL | SB 3856 | BIPA-SECURITY PURPOSE | Introduced | 6 February 2026 |
| IL | SB 3890 | CONSUMER DATA PRIVACY | In committee | 22 May 2026 |
| IL | SB 52 | PRIVACY RIGHTS ACT | In committee | 11 April 2025 |
| KS | SB 499 | Enacting the Kansas age-appropriate design code act to require businesses to assess and mitigate risks of compulsive use in minors, enacting the Kansas stopping likeness abuse by nonconsensual digital replicas act to create a private right of action for the unauthorized digital replication and distribution of individuals' digital likenesses and enacting the Kansas saving human connection act to prohibit deceptive practices and ensure transparency in chatbot interactions. | Dead | 10 April 2026 |
| KY | HB 33 | AN ACT relating to data privacy. | In committee | 13 January 2026 |
| KY | HB 473 | AN ACT relating to consumer data privacy. | Signed | 15 March 2025 |
| KY | HB 633 | AN ACT relating to data privacy. | In committee | 20 February 2026 |
| KY | HB 692 | AN ACT relating to data privacy. | Signed | 13 April 2026 |
| KY | HB 774 | AN ACT relating to the reporting of fines and fees. | In committee | 21 February 2025 |
| LA | SB 362 | CONSUMERS/PROTECTION: Provides that surveillance-based price discrimination is an unfair or deceptive trade practice or act. (8/1/26) | In committee | 9 March 2026 |
| LA | SB 386 † | IDENTITY DATA: Provides for opting out of providing personal information on social media websites. (1/1/27) | Enacted | 29 May 2026 |
| MA | H 103 | An Act to establish the Massachusetts neural data privacy protection act Companion: MA HD 4127 | In committee | 17 November 2025 |
| MA | H 104 | An Act establishing the Massachusetts Data Privacy Act Companion: MA HD 2110, MA S 29, MA S 45, MA SD 267, MA SD 495 | In committee | 17 November 2025 |
| MA | H 1578 | An Act relative to background checks for individuals in Massachusetts housing programs Companion: MA HD 2116 | In committee | 13 April 2026 |
| MA | H 1754 | An Act establishing an internet bill of rights Companion: MA HD 1679 | In committee | 26 March 2026 |
| MA | H 1804 | An Act relative to public safety, fiscal responsibility, and emergency assistance Companion: MA HD 4161, MA S 1272, MA SD 2391 | In committee | 26 March 2026 |
| MA | H 1926 | An Act relative to tenant data privacy | In committee | 26 March 2026 |
| MA | H 3470 | An Act protecting transportation network driver data privacy and integrity Companion: MA HD 3153, MA S 2259, MA SD 1491 | In committee | 6 April 2026 |
| MA | H 3510 | An Act relative to internet service provider data | In committee | 6 April 2026 |
| MA | H 4405 | An Act relative to student and educator data privacy | Passed committee | 18 August 2025 |
| MA | H 4745 | An Act promoting safe technology use and distraction-free education for youth | Passed committee | 17 November 2025 |
| MA | H 4746 | An Act establishing the Massachusetts consumer data privacy act | Passed committee | 17 November 2025 |
| MA | H 4807 | An Act relative to updating the security of personal information | Passed committee | 8 December 2025 |
| MA | H 5059 | An Act relative to judicial security | Passed committee | 9 February 2026 |
| MA | H 5472 | Amendment H.5472 Companion: MA H 5479 | Introduced | 4 June 2026 |
| MA | H 630 | An Act establishing an education-to-career data center Companion: MA HD 498, MA S 50, MA SD 824 | Passed committee | 18 August 2025 |
| MA | H 80 | An Act establishing the Comprehensive Massachusetts Consumer Data Privacy Act Companion: MA HD 4073, MA S 33, MA SD 2520 | In committee | 17 November 2025 |
| MA | H 93 | An Act relative to protecting sensitive information from security breaches Companion: MA HD 707 | Passed committee | 21 July 2025 |
| MA | H 96 | An Act to provide accountability in the use of biometric recognition technology and comprehensive enforcement Companion: MA HD 3523, MA S 36, MA SD 1455 | In committee | 17 November 2025 |
| MA | H 97 | An Act protecting consumers in interactions with artificial intelligence systems Companion: MA HD 4053 | Passed committee | 24 December 2025 |
| MA | HD 1031 † | An Act relative to tenant data privacy | Introduced | - |
| MA | HD 1050 | An Act relative to judicial security Companion: MA S 1278, MA SD 1110 | Introduced | - |
| MA | HD 5114 | An Act to protect privacy of motor vehicle owners and operators from electronic spying | In committee | 11 September 2025 |
| MA | HD 921 | An Act relative to surveillance pricing in grocery stores Companion: MA S 47, MA SD 587 | Introduced | - |
| MA | S 187 † | An Act relative to protecting biometric information under the security breach law Companion: MA SD 1559 | Passed committee | 31 December 2025 |
| MA | S 197 | An Act to protect safety and privacy by stopping the sale of location data Companion: MA SD 501 | Passed committee | 12 May 2025 |
| MA | S 250 | An Act relative to consumer health data Companion: MA H 461, MA HD 715, MA SD 1696 | Passed committee | 5 January 2026 |
| MA | S 2516 | An Act establishing the Massachusetts data privacy act Companion: MA H 78, MA HD 2135 | Passed committee | 25 September 2025 |
| MA | S 2608 | An Act establishing the Massachusetts data privacy act Companion: MA S 2619 | Floor vote | 25 September 2025 |
| MA | S 265 † | An Act protecting personal identifying information Companion: MA SD 70 | In committee | 8 December 2025 |
| MA | S 2998 | An Act further regulating business practices between motor vehicle dealers, manufacturers, and distributors | Passed committee | 26 March 2026 |
| MA | S 301 | An Act advancing the economic development of the commonwealth through comprehensive data privacy Companion: MA SD 2355 | In committee | 18 December 2025 |
| MA | S 364 | An Act establishing privacy standards for student and educator data Companion: MA H 633, MA HD 842, MA S 2618, MA SD 2360 | Passed committee | 24 July 2025 |
| MA | S 43 | An Act to protect personal biometric data Companion: MA SD 2204 | Passed committee | 12 May 2025 |
| MD | HB 1089 | Data Brokers - Registry and Gross Income Tax (Building Information Guardrails Data Act of 2025) Companion: MD SB 904 | In committee | 6 February 2025 |
| MD | HB 1089 | Consumer Protection - Data Broker Registry - Establishment | In committee | 17 February 2026 |
| MD | HB 1220 | Business Regulation - Data Broker Registry Companion: MD SB 616 | In committee | 18 February 2026 |
| MD | HB 1365 | Commercial Law - Online Data Privacy - Limits on Data Collection | In committee | 7 February 2025 |
| MD | HB 264 | Maryland Data Privacy and Protection Act of 2026 | Signed | 12 May 2026 |
| MD | HB 293 | Maryland Longitudinal Data System Center - External Data Sharing With Third-Party Data Centers for Multistate Reporting - Authorization Companion: MD SB 56 | Signed | 14 April 2026 |
| MD | HB 711 | Data Privacy - Consumer Data, Public Records, and Message Switching System (Data Privacy Act) Companion: MD SB 504 | Enacted | 31 May 2026 |
| MD | SB 564 | State Government - Office of the Attorney General - Data Protection | Passed chamber | 8 April 2026 |
| MD | SB 569 | Commercial Law - Online Data Privacy - Limits on Data Collection | In committee | 4 February 2026 |
| MD | SB 889 | Consumer Protection and Labor and Employment - Electronic Shelving Labels and Surveillance-Based Price and Wage Setting - Prohibitions | In committee | 12 February 2026 |
| ME | LD 1088 | An Act To Enact The Maine Consumer Data Privacy Act | Dead | 25 June 2025 |
| ME | LD 1224 | An Act To Comprehensively Protect Consumer Privacy | Dead | 17 June 2025 |
| MI | HB 4024 † | Civil rights: privacy; restriction of student access to certain restrooms and changing areas based on biological sex; provide for. Creates new act. | Passed chamber | 9 September 2025 |
| MI | HB 5357 | Communications: internet; age-appropriate design code act; create. Creates new act. | In committee | 16 December 2025 |
| MI | HB 5769 | Consumer protection: privacy; reproductive health data privacy act; create. Creates new act. | In committee | 14 April 2026 |
| MI | SB 24 | Juveniles: juvenile justice services; certain information sharing for research purposes in juvenile justice cases; allow. Amends sec. 9 of 1988 PA 13 (MCL 722.829). | Passed chamber | 5 March 2025 |
| MI | SB 359 | Consumer protection: privacy; personal data privacy act; create. Creates new act. | Passed committee | 12 June 2025 |
| MN | HF 1442 † | Elected officials and business entities permitted to access student or parent data. | In committee | 24 February 2025 |
| MN | HF 1567 † | Personal information protections provided to public safety officers. | Passed committee | 23 February 2026 |
| MN | HF 2161 † | Human services inspector general, home and community-based licensing, behavioral health licensing, backgrounds studies provisions, corrections reconsiderations, anti-kickback laws, and judges personal data protection provisions modified. | In committee | 12 March 2025 |
| MN | HF 2313 † | Geolocation and smartphone monitoring of another person prohibited, and cause of action when violation has occurred provided. | In committee | 13 March 2025 |
| MN | HF 2700 † | Minnesota Consumer Data Privacy Act modified to make consumer health data a form of sensitive data, and additional protections added for sensitive data. | Passed committee | 7 May 2026 |
| MN | HF 2714 † | Pharmacy benefit manager, technology platform, and data protection provisions modified relating to vendor contracts. | In committee | 24 March 2025 |
| MN | HF 2959 † | Data protection requirements in certain property tax proceedings modified. | In committee | 1 April 2025 |
| MN | HF 3101 † | Intellectual Freedom Protection Act regulated public postsecondary institutions created, private right of action created, and attorney general enforcement provided. | In committee | 3 April 2025 |
| MN | HF 3110 † | Disclosures of private student personal contact information to legislators and photographers allowed for specified purposes. | In committee | 3 April 2025 |
| MN | HF 3325 † | Data request and retention provisions modified, and fee waiver for certain data requests provided. | In committee | 14 May 2025 |
| MN | HF 4005 | Biometric data; consent for collection required, sale prohibited, deletion required, and civil penalties imposed. Companion: MN SF 4351 | In committee | 25 March 2026 |
| MN | HF 4475 | Mandatory privacy notices required to be titled as surveillance notices. Companion: MN SF 4666 | In committee | 18 March 2026 |
| MN | HF 962 † | Sharing and protection of data accessed by a prosecuting authority provided, and criminal penalties imposed. | Passed committee | 22 April 2026 |
| MN | SF 1602 † | Certain election officials and business entities permission to access student or parent data authorization provision | In committee | 20 February 2025 |
| MN | SF 2039 † | Judicial official real property records private data classification provision, judicial official real property records access limitations provision, criminal penalties provision | In committee | 3 March 2025 |
| MN | SF 2260 † | Biometric privacy standards and right of action establishment | In committee | 6 March 2025 |
| MN | SF 2574 † | Government data sharing in certain circumstances authorization provision | Passed committee | 1 April 2025 |
| MN | SF 2940 † | Minnesota Data Privacy Act modification to make consumer health data a form of sensitive data provision and sensitive data additional protections addition provision | In committee | 26 February 2026 |
| MN | SF 4 † | Omnibus Commerce and Consumer Protections policy and appropriations | Introduced | 9 June 2025 |
| MN | SF 4399 | Direct Care and Treatment data requirements modification | Passed committee | 22 April 2026 |
| MN | SF 4691 | Direct Care and Treatment data requirements modifications | In committee | 23 March 2026 |
| MN | SF 5221 | Geolocation data provisions establishment | In committee | 27 April 2026 |
| MN | SF 802 † | Student physical privacy provision | In committee | 6 March 2025 |
| MO | HB 1970 † | Establishes the "Biometric Information Privacy Act" | In committee | 15 May 2026 |
| MO | HB 3537 | Creates the "Enhanced Personal Privacy Act" | In committee | 15 May 2026 |
| MO | HB 407 | Establishes the "Biometric Information Privacy Act" Companion: MO HB 500 | In committee | 15 May 2025 |
| MO | SB 1359 | SB 1359 - This act provides that a private entity in possession of biometric identifiers or biometric information shall not be liable for damages for the unauthorized or negligent disclosure of biometric identifiers or biometric information if the private entity: (1) Posts and maintains warning signs or notices as specified in the act; (2) Informs the public and the individual about the specific purpose for which the identifier or information is being used; (3) Develops and complies with a written policy establishing a retention schedule and guidelines for permanently destroying identifiers and information; and (4) Stores, transmits, and protects from disclosure all identifiers and information in a manner that is the same as or more protective than the manner in which the private entity stores, transmits, and protects other confidential and sensitive information. This act is identical to SB 448 (2025). KATIE O'BRIEN | In committee | 27 January 2026 |
| MO | SB 448 | Establishes provisions relating to release of certain liabilities for unauthorized or negligent disclosure of biometric identifiers or information | In committee | 17 February 2025 |
| MO | SB 554 | Establishes the Biometric Information Privacy Act, which establishes requirements for and a cause of action against private entities in possession of biometric information | In committee | 27 February 2025 |
| MS | HB 1051 | Mississippi Consumer Privacy Protection Act; create. | In committee | 3 February 2026 |
| MS | HB 1596 † | Money transmitters; require to implement certain data security measures and customer protections. | Signed | 8 April 2026 |
| MS | HB 1732 † | Public property; authorize Department of Finance and Administration to sell and convey. | Passed chamber | 26 March 2026 |
| MS | SB 2015 | Mississippi Consumer Data Privacy Act; enact. | In committee | 3 February 2026 |
| MS | SB 2500 | Mississippi Consumer Data Protection Act; enact. | In committee | 4 February 2025 |
| MS | SB 2779 | Mississippi Consumer Data Privacy Act; enact. | In committee | 4 February 2025 |
| MT | HB 32 | Allow audio and video recording of public events | Enacted | 27 February 2025 |
| MT | LC 124 † | Revise laws related to privacy in health digital services and applications | Dead | 22 May 2025 |
| MT | LC 125 † | Generally revise pupil data privacy protections | Dead | 22 May 2025 |
| MT | LC 1267 † | Generally revise student data privacy laws Companion: MT LC 2818 | Dead | 24 May 2025 |
| MT | LC 1633 † | Allowing residents the right to request the deletion of digital identification data from state agency databases | Dead | 26 May 2025 |
| MT | LC 2117 † | Revise online data privacy laws for K-12 pupil records | Introduced | 15 January 2025 |
| MT | LC 2121 † | Generally revise laws relating to personal privacy | Dead | 22 May 2025 |
| MT | LC 294 † | Generally revise student data laws to enhance privacy | Introduced | 8 January 2025 |
| MT | LC 3152 † | Provide online privacy protection act | Dead | 27 May 2025 |
| MT | LC 343 † | Revise biometric information ownership laws | Dead | 22 May 2025 |
| MT | LC 344 † | Constitutional referendum on the ownership of biometric data | Dead | 22 May 2025 |
| MT | LC 3513 † | Generally revise data privacy laws - Agricultural data | Dead | 20 May 2025 |
| MT | LC 3519 † | Resolution to protect online personally identifiable information | Introduced | 19 February 2025 |
| MT | LC 372 | Generally revise privacy laws | Introduced | 10 February 2025 |
| MT | LC 4131 † | Enact the financial data protection act | Dead | 22 May 2025 |
| MT | LC 5 † | Generally revise privacy laws related to biometric, genetic, and neural data | Introduced | 13 January 2025 |
| MT | LC 589 | Prohibit sale of electronic data to the federal government | Introduced | 21 February 2025 |
| MT | LC 61 † | Limit state government use of personal electronic data | Introduced | 5 February 2025 |
| MT | LC 722 † | Provide for personal ownership of electronic data | Dead | 22 May 2025 |
| MT | LC 807 † | Constitutional amendment on biometric data | Dead | 22 May 2025 |
| MT | SB 118 | Generally revise student data laws to enhance privacy | Dead | 23 May 2025 |
| MT | SB 163 | Generally revise privacy laws related to biometric, genetic, and neural data | Enacted | 5 May 2025 |
| MT | SB 297 | Generally revise privacy laws | Enacted | 13 May 2025 |
| MT | SB 453 | Prohibit sale of electronic data to the federal government | Dead | 23 May 2025 |
| NC | HB 462 | Personal Data Privacy/Social Media Safety. | Passed committee | 29 April 2025 |
| NC | HB 819 | DIT Agency Bill. | Passed chamber | 26 June 2025 |
| NC | SB 1022 | Consumer Privacy Act. Companion: NC SB 757 | In committee | 5 May 2026 |
| NC | SB 1033 | NC Children's Safe Screens Act/Funds. | In committee | 5 May 2026 |
| NC | SB 133 | NCCCS LMS/NCLDS. | Enacted | 3 July 2025 |
| NC | SB 835 | Surveillance Pricing Ban. | In committee | 28 April 2026 |
| NC | SB 888 | Immigration Data Privacy. | In committee | 29 April 2026 |
| NE | LB 204 | Adopt the Biometric Autonomy Liberty Law | Dead | 17 April 2026 |
| NE | LB 504 | Adopt the Age-Appropriate Online Design Code Act | Signed | 2 June 2025 |
| NE | LB 602 | Adopt the Data Elimination and Limiting Extensive Tracking and Exchange Act | Dead | 17 April 2026 |
| NE | LB 729 | Adopt the Biometric Autonomy Liberty Law | Dead | 9 January 2026 |
| NH | HB 1316 † | restricting the collection and disclosure of autism-related data by state agencies. | Dead | 25 February 2026 |
| NH | HB 1408 † | prohibiting public disclosure of personal information on the Internet by an elected official. | Passed committee | 16 March 2026 |
| NH | HB 1460 † | prohibiting the sale of a child's personal data. | Signed | 24 June 2026 |
| NH | HB 1582 † | prohibiting the use of credit information in underwriting and rating personal automobile and homeowners insurance policies and prohibiting certain surveillance practices by insurers. | Dead | 11 March 2026 |
| NH | HB 1694 † | relative to the regulation of and protections for personal data obtained by websites and data brokers. | Dead | 5 February 2026 |
| NJ | A 1358 | Concerns social media privacy and data management for children and establishes New Jersey Children's Data Protection Commission. | In committee | 13 January 2026 |
| NJ | A 1360 | "New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs. Companion: NJ S 2602 | In committee | 13 January 2026 |
| NJ | A 1401 | Exempts certain personal information and entities from certain requirements concerning notification and disclosure of personal data. Companion: NJ S 2956 | In committee | 13 January 2026 |
| NJ | A 1923 | Prohibits providers of commercial mobile service and developers of mobile application from disclosing customer's global position system data to third parties under certain circumstances. Companion: NJ S 2140 | In committee | 13 January 2026 |
| NJ | A 2297 | Establishes certain data privacy protection requirements for consumer health data, health care providers, and patients. Companion: NJ S 2969 | In committee | 13 January 2026 |
| NJ | A 3276 | Prohibits State from disclosing New Jersey driver's license holders' personal information to other states seeking to issue speed camera or red light camera citations. | In committee | 13 January 2026 |
| NJ | A 3609 | Expands protections under "Daniel's Law"; requires Office of Information Privacy to establish portal for prohibiting disclosure of personal information by private entities and establishes penalties for failure to comply. Companion: NJ S 2783 | In committee | 13 January 2026 |
| NJ | A 3926 | Prohibits collection of biometric identifier information by public or private entity under certain circumstances. Companion: NJ S 1463 | In committee | 13 January 2026 |
| NJ | A 3929 | Prohibits use of biometric surveillance system by business entity under certain circumstances. Companion: NJ S 1464 | Passed committee | 4 May 2026 |
| NJ | A 4093 | Requires certain persons and business entities to maintain comprehensive information security program. | In committee | 19 February 2026 |
| NJ | A 4436 | Expands "Daniel's Law" protections; requires Office of Information Privacy to establish portal for prohibiting disclosure of personal information by private entities and establishes penalties for failure to comply. Companion: NJ S 3605 | In committee | 19 February 2026 |
| NJ | A 4685 | Prohibits use and sale of algorithmic devices that set sale price of goods or services. | In committee | 16 March 2026 |
| NJ | A 4741 | Requires controller or processor to de-identify personal data and prohibits re-identification of de-identified data. Companion: NJ S 4315 | In committee | 12 September 2024 |
| NJ | A 5017 | Exempts certain personal information and entities from certain requirements concerning notification and disclosure of personal data.* | Passed chamber | 12 January 2026 |
| NJ | A 5328 † | Regulates data brokers, data collectors, and collection and dissemination of certain sensitive information. Companion: NJ S 2316 | Passed chamber | 30 June 2026 |
| NJ | A 5332 | Regulates data brokers and collection and dissemination of certain sensitive information. | In committee | 28 June 2026 |
| NJ | A 5362 † | Prohibits sale of minor's personal data; requires controllers and processors to provide mechanism for requesting deletion of certain personal data. | Introduced | - |
| NJ | A 5438 † | Establishes New Jersey Kids Online Privacy and Safety Act. | Introduced | - |
| NJ | A 5632 | Requires MVC to establish and administer online application for REAL ID identification cards and REAL ID licenses. | In committee | 8 May 2025 |
| NJ | A 6125 | Expands protections under "Daniel's Law"; requires Office of Information Privacy to establish portal for prohibiting disclosure of personal information by private entities and establishes penalties for failure to comply. | In committee | 24 November 2025 |
| NJ | A 6164 | Establishes certain data privacy protection requirements for consumer health data, health care providers, and patients. Companion: NJ S 4684 | In committee | 4 December 2025 |
| NJ | A 6309 | Establishes "Privacy Protection Act"; concerns collection and sharing of certain personal information. | Passed chamber | 12 January 2026 |
| NJ | A 973 | Expands definition of personal data to include use of reproductive health care services and prohibits collection of reproductive health care prescription drugs from Prescription Monitoring Program. | In committee | 13 January 2026 |
| NJ | S 1354 | Requires controller or processor to de-identify personal data and prohibits re-identification of de-identified data. | In committee | 13 January 2026 |
| NJ | S 3016 † | Prohibits certain substances in sale, distribution, and manufacture of commercial foods for human consumption; bans certain substances in school food.* | Passed committee | 8 December 2025 |
| NJ | S 3218 | "School Zone Automated Speed Enforcement and Safety Act." | In committee | 28 January 2026 |
| NJ | S 3268 | Prohibits use of facial recognition technology on consumer except for legitimate safety purpose. | In committee | 2 February 2026 |
| NJ | S 3522 † | Establishes "Privacy Protection Act"; concerns collection and sharing of certain personal information. | In committee | 23 March 2026 |
| NJ | S 4016 | Concerns social media privacy and data management for children and establishes New Jersey Children's Data Protection Commission. | In committee | 19 March 2026 |
| NJ | S 4109 | Prohibits controller of commercial Internet website or online service from selling sensitive personal data. | In committee | 18 May 2026 |
| NJ | S 4239 | Establishes Office of Algorithmic Civil Rights in DLPS to prevent discrimination in use of algorithms. | In committee | 14 May 2026 |
| NJ | S 4259 | Exempts certain personal information and entities from certain requirements concerning notification and disclosure of personal data.* | Passed committee | 18 December 2025 |
| NJ | S 4314 | Prohibits personalized algorithmic pricing and surveillance-based pricing by certain retailers in online commerce. | In committee | 21 May 2026 |
| NJ | S 4483 | Repeals law prohibiting collection and sharing of certain personal information. | In committee | 22 June 2026 |
| NM | HB 214 | CONSUMER INFORMATION AND DATA PROTECTION ACT | Introduced | 24 March 2026 |
| NM | HB 410 | CONSUMER INFO & DATA PROTECTION ACT | Passed committee | 3 June 2025 |
| NM | HB 430 | HEALTH DATA PRIVACY ACT | Passed committee | 3 June 2025 |
| NM | SB 192 | DATA BROKER PRIVACY ACT | In committee | 24 March 2026 |
| NM | SB 420 | COMMUNITY PRIVACY & SAFETY ACT Companion: NM HB 307 | Passed committee | 3 June 2025 |
| NM | SB 53 | COMMUNITY & HEALTH INFO SAFETY & PRIVACY ACT | Passed committee | 24 March 2026 |
| NV | AB 589 † | Establishes requirements to protect the privacy of certain information and genetic material. (BDR 19-1241) | Vetoed | 9 June 2025 |
| NV | SB 445 † | Revises provisions relating to the privacy of data concerning pupils. (BDR 34-854) | Signed | 28 May 2025 |
| NV | SB 63 | Revises provisions relating to the processing of certain data. (BDR 52-505) | Passed chamber | 3 June 2025 |
| NY | A 10911 | Prohibits data brokers from selling the personal information of current and former military service members Companion: NY S 6797 | In committee | 8 April 2026 |
| NY | A 1415 | Creates privacy standards for electronic health products and services | In committee | 7 January 2026 |
| NY | A 2157 | Directs the board to submit a recommendation regarding the central business district toll amounts to the legislature and recommending a privacy risk plan Companion: NY S 284 | In committee | 7 January 2026 |
| NY | A 257 | Restricts the disclosure of personal information by businesses Companion: NY S 6922, NY S 9672 | In committee | 7 January 2026 |
| NY | A 3087 | Relates to establishing the online consumer protection act Companion: NY S 4270 | In committee | 7 January 2026 |
| NY | A 4947 | Relates to enacting the NY privacy act Companion: NY A 8158, NY A 974, NY S 3044, NY S 8524 | In committee | 7 January 2026 |
| NY | A 5827 | Relates to data privacy protection; establishes the privacy and security victims relief fund | In committee | 7 January 2026 |
| NY | A 6211 | Prohibits the use of biometric surveillance system or biometric surveillance information in places of public accommodation Companion: NY S 8004 | In committee | 7 January 2026 |
| NY | A 7559 | Relates to the protection of consumer genetic data in financial distress | In committee | 7 January 2026 |
| NY | A 7597 | Prohibits property and casualty insurance companies from increasing rates based on geolocation information | In committee | 7 January 2026 |
| NY | A 8101 | Establishes the New York Data Protection Act Companion: NY S 4860 | In committee | 7 January 2026 |
| NY | A 837 | Enacts the "empire state enhanced public payment system act" | In committee | 7 January 2026 |
| NY | A 8716 | Enacts the "autism data privacy protection act" | In committee | 7 January 2026 |
| NY | A 9181 | Establishes a statewide student attendance and absenteeism dashboard Companion: NY S 8526 | In committee | 7 January 2026 |
| NY | K 898 | Memorializing Governor Kathy Hochul to proclaim January 26-30, 2026, as Data Privacy Week in the State of New York | Passed chamber | 29 January 2026 |
| NY | S 1422 | Establishes the biometric identifier privacy act Companion: NY A 6031 | Passed chamber | 3 June 2026 |
| NY | S 3641 | Enacts the "pupil privacy act" | In committee | 7 January 2026 |
| NY | S 4600 † | Relates to enacting the New York child data privacy and protection act | In committee | 7 January 2026 |
| NY | S 5005 | Creates a private right of action for the breach of a consumer's identifying information | In committee | 7 January 2026 |
| NY | S 5156 | Establishes the "It's Your Data Act" | In committee | 7 January 2026 |
| NY | S 5434 | Establishes the office of consumer data protection and imposes a tax on data controllers and data processors | In committee | 7 January 2026 |
| NY | S 9088 | Requires the registration of data brokers and establishing a data deletion mechanism for consumers Companion: NY A 9642 | Passed chamber | 4 June 2026 |
| NY | S 9131 | Relates to data broker regulation | In committee | 5 February 2026 |
| NY | S 9267 | Enacts the consumer camera privacy act Companion: NY A 10687 | Passed chamber | 2 June 2026 |
| OH | HB 725 | Restrict commercial use of license plate recognition data | In committee | 4 March 2026 |
| OK | HB 1012 | Data privacy; Oklahoma Computer Data Privacy Act; consumer protection; civil penalties; effective date. | Passed committee | 6 February 2025 |
| OK | HB 1012 † | Data privacy; Oklahoma Computer Data Privacy Act; consumer protection; civil penalties; effective date. | Passed committee | 6 February 2025 |
| OK | HB 1762 | Children; covered entities; data protection impact assessment; personal data of children; Attorney General; effective date. | In committee | 10 February 2025 |
| OK | HB 1762 | Children; covered entities; data protection impact assessment; personal data of children; Attorney General; effective date. | In committee | 10 February 2025 |
| OK | SB 1716 | Security Breach Notification Act; prohibiting class action liability for private entity for cybersecurity event; providing exceptions. Effective date. | Passed chamber | 6 April 2026 |
| OK | SB 546 | Data privacy; establishing consumer rights; appeal process; privacy notice; data protection assessments; penalties; liability. Effective date. | Signed | 20 March 2026 |
| OK | SB 546 | Data privacy; establishing consumer rights for processing of certain data. Effective date. | Passed chamber | 24 April 2025 |
| OR | HB 2008 † | Relating to consumer protection. | Signed | 20 June 2025 |
| OR | HB 3828 † | Relating to privacy protection for personal data. | In committee | 28 June 2025 |
| OR | HB 3875 | Relating to personal data obtained from a consumer's use of a motor vehicle; and prescribing an effective date. | Signed | 11 June 2025 |
| OR | HB 3899 | Relating to requirements that apply to persons that process consumer personal data. | In committee | 28 June 2025 |
| OR | SB 1121 | Relating to the disclosure of private information; and declaring an emergency. | Signed | 2 July 2025 |
| PA | HB 1179 † | An Act providing for privacy, transparency and compensation regarding the disclosure of information collected by genetic material testing entities. | In committee | 9 April 2025 |
| PA | HB 1448 | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in preliminary provisions, providing for financial transparency data and reporting system. | In committee | 13 May 2025 |
| PA | HB 1530 | An Act providing for duties of direct-to-consumer genetic testing companies and for prohibition on disclosure of genetic data of consumers; and imposing civil penalties. | Passed chamber | 22 December 2025 |
| PA | HB 1624 † | An Act prohibiting certain covered entities and service providers from collecting and processing location information of individuals without consent; providing for enforcement by Attorney General; establishing a private right of action; and prescribing penalties. | In committee | 20 June 2025 |
| PA | HB 1804 † | An Act providing for the withholding of Commonwealth payments to the Federal Government; perfecting liens on Federal property; establishing a civil cause of action; and prohibiting the Commonwealth from sharing data with the Federal Government that contains personally identifiable information. | In committee | 15 August 2025 |
| PA | HB 1822 † | An Act amending Title 44 (Law and Justice) of the Pennsylvania Consolidated Statutes, providing for protection of personal data of certain public servants; imposing duties on data brokers regarding personal data; and providing for civil enforcement. | Passed committee | 27 October 2025 |
| PA | HB 1834 † | An Act providing for the regulation of commercial data centers;
imposing duties on the Pennsylvania Public Utility
Commission, the Department of Human Services and the
Pennsylvania Energy Development Authority; establishing the
Data Center Low-Income Home Energy Assistance Program
Enhancement Account and the Pennsylvania Energy Independence
Account; providing for clean firm energy requirements,
contract filing, commission review, disclosure requirements,
backup generation standards, curtailment standards and
certification and expedited interconnection for commercial
data centers bringing incremental clean firm energy
resources; and imposing penalties. Companion: PA SB 1323 | Passed chamber | 31 March 2026 |
| PA | HB 1857 † | An Act requiring business entities to disclose the use of artificial intelligence in certain consumer interactions; establishing the right of consumers to human review in high-impact decisions; and providing for enforcement by Attorney General. | In committee | 10 September 2025 |
| PA | HB 1942 † | An Act providing for prohibition on surveillance pricing; and imposing penalties. | In committee | 16 October 2025 |
| PA | HB 2108 † | An Act providing for duties of covered entities to protect the best interests of children that use online services, products or features and for data protection impact assessments; prohibiting certain actions by covered entities; and imposing penalties. | In committee | 18 December 2025 |
| PA | HB 2515 † | An Act providing for commercial data center transparency regarding energy use, water use and noise pollution; imposing duties on the Department of Environmental Protection, the Department of Transportation and the Office of Attorney General; and imposing civil penalties. | In committee | 13 May 2026 |
| PA | HB 2666 † | An Act providing for limitations on the use of user data in the creation of artificial intelligence simulations and for private right of action; and imposing penalties. | In committee | 24 June 2026 |
| PA | HB 535 † | An Act providing for health care insurance coverage protections; imposing duties on the Insurance Department and the Insurance Commissioner; and imposing penalties. | Passed chamber | 25 March 2025 |
| PA | HB 596 † | An Act providing for a requirement for commercial establishments to disclose the use and collection of biometric identifier information and providing for a private cause of action. | In committee | 12 February 2025 |
| PA | HB 618 † | An Act providing for health insurance access protections; imposing duties on the Insurance Department and the Insurance Commissioner; and imposing penalties. | Passed chamber | 25 March 2025 |
| PA | HB 755 † | An Act providing for health care insurance preventive services coverage protections; conferring authority on the Insurance Department and the Insurance Commissioner; and providing for regulations, for enforcement and for penalties. Companion: PA SB 1195 | Passed chamber | 25 March 2025 |
| PA | HB 78 † | An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties. | Passed chamber | 25 June 2026 |
| PA | SB 1090 † | An Act providing for disclosures and safeguards relating to the use of artificial intelligence; and imposing duties on the Attorney General. | Passed chamber | 18 March 2026 |
| PA | SB 112 | An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties. | In committee | 21 March 2025 |
| PA | SB 1333 † | An Act prohibiting employers from using consumer reporting under certain circumstances; and providing for enforcement. | In committee | 21 May 2026 |
| PA | SB 1349 † | An Act providing for transparency in use of generative artificial intelligence; requiring disclosure of synthetic content; providing for establishment of content verification tools; imposing duties on the Bureau of Consumer Protection in the Office of Attorney General; and imposing penalties. | In committee | 4 June 2026 |
| PA | SB 1396 † | An Act amending Title 44 (Law and Justice) of the Pennsylvania Consolidated Statutes, in preliminary provisions, providing for public servant data privacy. | In committee | 10 July 2026 |
| PA | SB 378 † | An Act amending Title 24 (Education) of the Pennsylvania Consolidated Statutes, in preliminary provisions, providing for student data privacy and protection; conferring powers and imposing duties on the Department of Education; and imposing penalties. | Passed committee | 3 June 2026 |
| RI | HB 5176 | AN ACT RELATING TO EDUCATION -- STUDENT COMPUTER DEVICE PRIVACY Companion: RI SB 232 | Dead | 21 March 2025 |
| RI | HB 5857 | AN ACT RELATING TO HEALTH AND SAFETY -- REPRODUCTIVE FREEDOM AND GENDER AFFIRMING CARE HEALTH DATA PRIVACY ACT Companion: RI SB 824 | Dead | 23 April 2025 |
| RI | HB 7357 | AN ACT RELATING TO HEALTH AND SAFETY -- SENSITIVE HEALTHCARE INFORMATION PRIVACY ACT Companion: RI SB 2992 | Dead | 11 June 2026 |
| RI | HB 7632 | AN ACT RELATING TO COMMERCIAL LAW -- GENERAL REGULATORY PROVISIONS -- AGE-APPROPRIATE DESIGN CODE Companion: RI SB 2406 | Dead | 8 April 2026 |
| RI | HB 7639 | AN ACT RELATING TO COMMERCIAL LAW--GENERAL REGULATORY PROVISIONS -- GENETIC INFORMATION PRIVACY ACT Companion: RI SB 2203 | Signed | 19 June 2026 |
| RI | HB 7954 † | AN ACT RELATING TO COMMERCIAL LAW -- GENERAL REGULATORY PROVISIONS -- DIGITAL PLATFORM TRANSPARENCY AND DEMOCRATIC INTEGRITY ACT | Dead | 5 March 2026 |
| RI | HB 8119 † | AN ACT RELATING TO STATE AFFAIRS AND GOVERNMENT -- WARRANTLESS PURCHASES OF PERSONAL DATA -- THE 4TH AMENDMENT IS NOT FOR SALE ACT | Dead | 24 March 2026 |
| RI | SB 2129 | AN ACT RELATING TO HEALTH AND SAFETY -- REPRODUCTIVE FREEDOM AND GENDER AFFIRMING CARE HEALTH DATA PRIVACY ACT | In committee | 16 January 2026 |
| RI | SB 2154 † | AN ACT RELATING TO CRIMINAL PROCEDURE -- ELECTRONIC INFORMATION AND DATA PRIVACY ACT | Dead | 2 April 2026 |
| RI | SB 2766 | AN ACT RELATING TO COMMERCIAL LAW -- GENERAL REGULATORY PROVISIONS -- RHODE ISLAND DELETE ACT | Dead | 31 March 2026 |
| RI | SB 2786 | AN ACT RELATING TO EDUCATION -- STUDENT COMPUTER DEVICE PRIVACY | Dead | 8 April 2026 |
| RI | SB 767 | AN ACT RELATING TO COMMERCIAL LAW--GENERAL REGULATORY PROVISIONS -- GENETIC INFORMATION PRIVACY ACT | Dead | 9 May 2025 |
| SC | H 3400 | Child Data Privacy and Protection Act | In committee | 14 January 2025 |
| SC | H 3401 | Technology Transparency | In committee | 14 January 2025 |
| SC | H 3402 | Age-Appropriate Design | In committee | 14 January 2025 |
| SC | H 3431 | South Carolina Social Media Regulation Act | Signed | 6 February 2026 |
| SC | H 4666 | Digital Choice Act Companion: SC S 932 | In committee | 10 March 2026 |
| SC | H 4809 | Digital forms of identification | In committee | 13 January 2026 |
| SC | S 896 | Chatbot Regulation | Passed committee | 6 May 2026 |
| SD | HB 1309 | restrict the processing of online personal data of individuals sixteen years of age or younger. | In committee | 20 February 2026 |
| TN | HB 1468 | Consumer Protection - As introduced, prohibits an entity from setting the price of a specific good or service using personalized algorithmic pricing; designates a violation as an unfair or deceptive act or practice affecting trade or commerce in violation of the Tennessee Consumer Protection Act of 1977. - Amends TCA Title 29; Title 45; Title 47 and Title 66. Companion: TN SB 1807 | In committee | 18 March 2026 |
| TN | HB 2052 | Consumer Protection - As introduced, requires certain food retail establishments to use a nondigital presentation of price; prohibits a food retail establishment from using personalized algorithmic pricing; makes other changes related to food retail establishments. - Amends TCA Title 47 and Title 53. Companion: TN SB 1998 | In committee | 4 March 2026 |
| TN | HB 630 | Consumer Protection - As introduced, authorizes a consumer to designate an authorized agent who may opt the consumer out of the processing of the consumer’s personal data; requires a controller to comply with an opt-out request from an authorized agent if certain conditions are met. - Amends TCA Title 47, Chapter 18. Companion: TN SB 663 | In committee | 12 March 2025 |
| TN | SB 2100 | Consumer Protection - As introduced, requires certain data controllers to annually register with the consumer protection division of the office of the attorney general and reporter; requires the division to create and maintain a website and accessible deletion mechanism that a consumer can use at no cost to make a single deletion request that is binding on all controllers registered with the division; makes other related changes to the Tennessee Information Protection Act. - Amends TCA Title 47, Chapter 18, Part 33. | In committee | 5 February 2026 |
| TX | HB 3285 | Relating to requiring operators of smart devices to provide information to users about the collection of personal data. Companion: TX SB 726 | Dead | 30 April 2025 |
| TX | HB 3755 | Relating to biometric identifiers used in the performance of artificial intelligence. Companion: TX SB 2490 | In committee | 26 March 2025 |
| TX | HB 4294 | Relating to the regulation of platforms for the sale and distribution of software applications for mobile devices; authorizing a civil penalty. | In committee | 1 April 2025 |
| TX | HB 4555 | Relating to the diagnosis, maintenance, and repair of certain motor vehicles; providing a civil penalty. | Dead | 23 April 2025 |
| TX | HB 4636 | Relating to the collection and disclosure of a consumer's driving and precise geolocation data. | In committee | 3 April 2025 |
| TX | HB 5046 † | Relating to the collection, use, processing, and treatment of consumers' personal data by certain business entities. | In committee | 3 April 2025 |
| TX | HB 5081 | Relating to the protection of personal identifying information of certain individuals in the judicial system; creating a criminal offense. | Enacted | 20 June 2025 |
| TX | HB 5495 | Relating to authorizing the use of global privacy controls to protect a consumer's personal data; providing a civil penalty. | In committee | 7 April 2025 |
| TX | SB 1343 | Relating to the notice requirements of a data broker registration statement and Internet website. | Enacted | 20 June 2025 |
| US | H.R. 2885 | Bank Loan Privacy Act | In committee | 10 April 2025 |
| US | H.R. 9619 † | To require artificial intelligence chatbot providers to provide data privacy and security, and for other purposes. | In committee | 9 July 2026 |
| US | S. 863 | Genomic Data Protection Act | In committee | 5 March 2025 |
| UT | HB 199 | Health Data Amendments | Signed | 17 March 2026 |
| UT | HB 357 | Amendments to Motor Vehicle Data Privacy | Signed | 19 March 2026 |
| UT | HB 418 | Data Sharing Amendments | Signed | 27 March 2025 |
| UT | HB 438 | Artificial Intelligence Amendments | Dead | 7 March 2026 |
| UT | HB 450 | Data Privacy Amendments | Signed | 19 March 2026 |
| UT | SB 108 | Online Marketplace Amendments | Signed | 17 March 2026 |
| UT | SB 152 † | Public and Higher Education Collaboration | Signed | 19 March 2026 |
| VA | HB 1624 | Consumer Data Protection Act; social media platforms; addictive feed prohibited for minors. | In committee | 4 February 2025 |
| VA | HB 1632 | Data Governance and Analytics, Office of; changes oversight of office to VITA. | Signed | 18 March 2025 |
| VA | HB 1648 | Office of Data Governance and Analytics; oversight; Chief Data Officer; duties. | In committee | 21 January 2025 |
| VA | HB 1817 | Consumer Data Protection Act; social media, parental consent. | In committee | 4 February 2025 |
| VA | HB 2043 | Consumer Data Protection Act; user-generated content protected, civil penalty. | In committee | 4 February 2025 |
| VA | HB 2250 | Artificial Intelligence Training Data Transparency Act; transparency and disclosure requirements. | In committee | 4 February 2025 |
| VA | HB 2433 | Law-enforcement agencies; use of certain technologies and interrogation practices. | In committee | 5 February 2025 |
| VA | HB 2465 | Va. Ed. & Workforce Data Governing Board & Office of Va. Education & Workforce Data; established. | In committee | 4 February 2025 |
| VA | HB 638 | Data brokers; regulation, civil penalties. | In committee | 9 February 2026 |
| VA | HB 654 | Consumer Data Protection Act; definition of "biometric data"; consent required for processing. | In committee | 18 February 2026 |
| VA | HB 971 | College student-athletes; biometric data, protections and limitations. | Signed | 6 April 2026 |
| VA | HB 994 | Photo speed monitoring devices; placement and operation. | Signed | 13 April 2026 |
| VA | SB 1023 | Consumer Data Protection Act; data controller responsibilities, precise geolocation data. | Passed chamber | 18 February 2025 |
| VA | SB 1137 | Data Governance and Analytics, Office of; changes oversight of office to VITA. | Signed | 18 March 2025 |
| VA | SB 1193 | Criminal history record information; dissemination of record information. | Signed | 24 March 2025 |
| VA | SB 1440 | Consumer data privacy; automakers, civil penalty. | In committee | 5 February 2025 |
| VA | SB 201 | Consumer Data Protection Act; protections for children, definitions. | Dead | 4 February 2026 |
| VA | SB 232 | Consumer Data Protection Act; prohibitions and duties relating to minors. | Passed committee | 4 February 2026 |
| VA | SB 252 † | Consumer Data Protection Act; controller privacy notice, consumer consent. | In committee | 19 November 2024 |
| VA | SB 338 † | Consumer Data Protection Act; data controller responsibilities, precise geolocation data. | Signed | 13 April 2026 |
| VA | SB 432 † | Consumer Data Protection Act; protections for children. | In committee | 19 November 2024 |
| VA | SB 615 | Consumer Data Protection Act; online device pricing, prohibition. | In committee | 28 January 2026 |
| VA | SB 684 † | Online Children's Safety Protection Act; established, civil penalties. | In committee | 19 November 2024 |
| VA | SB 769 | Consumer Data Protection Act; controller privacy notice; cookies; consumer consent. | In committee | 5 February 2025 |
| VA | SB 783 | Consumer Data Protection Act; protections for children. | In committee | 29 January 2025 |
| VA | SB 85 | Consumer Data Protection Act; social media platforms & model operators, interoperability interfaces. | Passed chamber | 9 March 2026 |
| VA | SB 854 | Consumer Data Protection Act; social media platforms, responsibilities and prohibitions to minors. | Signed | 2 May 2025 |
| VT | H 208 | An act relating to consumer data privacy and online surveillance | Introduced | 12 February 2025 |
| VT | H 210 | An act relating to an age-appropriate design code | Introduced | 12 February 2025 |
| VT | H 211 † | An act relating to data brokers and personal information | Signed | 29 May 2026 |
| VT | H 520 † | An act relating to the right of users to control their social media data | Introduced | 20 May 2025 |
| VT | H 639 † | An act relating to genetic data privacy Companion: VT S 248 | Signed | 29 May 2026 |
| VT | H 706 † | An act relating to internet browsers and data selling | Introduced | 16 January 2026 |
| VT | H 791 † | An act relating to State government and information privacy | Introduced | 28 January 2026 |
| VT | H 812 † | An act relating to data loyalty | Introduced | 29 January 2026 |
| VT | S 207 † | An act relating to prohibiting surveillance pricing | Introduced | 6 January 2026 |
| VT | S 69 | An act relating to an age-appropriate design code | Signed | 13 June 2025 |
| VT | S 70 | An act relating to data brokers and personal information | Introduced | 18 February 2025 |
| VT | S 71 † | An act relating to consumer data privacy and online surveillance | Signed | 29 May 2026 |
| VT | S 74 | An act relating to the collection, sharing, and selling of consumer health data | Introduced | 19 February 2025 |
| VT | S 93 | An act relating to consumer data privacy | Introduced | 27 February 2025 |
| WA | HB 1382 | Modernizing the all payers claim database. | Enacted | 17 May 2025 |
| WA | HB 1671 | Protecting personal data privacy. | Passed committee | 12 January 2026 |
| WA | HB 1887 | Creating a data broker registry for the purpose of imposing a data broker severance tax. | Introduced | 12 January 2026 |
| WA | HB 2483 | Creating a data broker registry. | Passed committee | 6 February 2026 |
| WA | HB 2529 | Concerning the department of children, youth, and families accountability board. | Introduced | 28 January 2026 |
| WA | HB 2606 | Concerning performance measures, duties, and reporting requirements for the office of privacy and data protection. | Enacted | 9 March 2026 |
| WA | HR 4609 | Recognizing Data Privacy Day. | Passed chamber | 28 January 2025 |
| WI | AB 1161 | Relating to: online services accessed by minors, minors’ personal data, and granting rule-making authority. Companion: WI SB 978 | Dead | 23 March 2026 |
| WI | AB 172 | Relating to: consumer data protection and providing a penalty. (FE) Companion: WI SB 166 | Dead | 23 March 2026 |
| WI | AB 378 | Relating to: prohibiting the state from sharing data with the federal government that contains personally identifiable information if the data is not first masked or otherwise anonymized and authorizing a civil cause of action for negligent violations of that prohibition. (FE) Companion: WI SB 369 | Dead | 23 March 2026 |
| WI | AB 667 | Relating to: prohibiting a law enforcement agency from accessing personal data in exchange for payment without a warrant. Companion: WI SB 679 | Dead | 23 March 2026 |
| WI | SB 796 | Relating to: mandatory participation in the Wisconsin Health Information Organization. (FE) | Dead | 23 March 2026 |
| WV | HB 2987 † | Relating to the Consumer Data Protection Act | Passed chamber | 27 March 2025 |
| WV | HB 3498 | Productive Energy Site Reclamation Waiver | In committee | 18 March 2025 |
| WV | HB 4843 † | Relating to consumer protection and the collection of certain personally identifiable information. | In committee | 27 January 2026 |
| WV | HB 5034 † | Relating to biometric privacy | In committee | 2 February 2026 |
| WV | HB 5123 † | Consumer Data Protection Act | In committee | 3 February 2026 |
| WV | HB 5427 † | To prohibit the malicious publication of personally identifiable information with intent to harass, intimidate, threaten, stalk, or facilitate harm. | In committee | 10 February 2026 |
| WV | HB 5528 † | Relating to protection of personal residential information of certain public officials. | Enacted | 29 June 2026 |
| WV | HB 5541 † | Relating to the protection of personal information for elected officials | In committee | 16 February 2026 |
| WY | HB 181 | Biometric data and license plate readers-regulation. | In committee | 14 February 2026 |
Source: Open States. Statuses show where each bill stood on 18 August 2026, when this issue was generated, rather than at the end of the period.
Tracker definitions are model-drafted and validated by retrieval measurement. They are not a lawyer's definition of a practice area.
The summary and the one-line notes under each bill were written by us.anthropic.claude-opus-4-5-20251101-v1:0 from the data in this issue. Every figure, bill and date is from the record; the sentences around them are not legal advice.
† Matched on the bill's title alone, because the platform does not yet hold that bill's full text. Every other bill is matched on its whole document.
Published by LawSignals. Data Privacy Legislation Tracker is issued monthly. lawsignals.com/data-privacy