Misinformation and amendments derailed a bill on data-driven pricing, also called “surveillance pricing,” that was nearing the finish line in California. After Senate appropriators last week narrowed the legislation to apply only to grocery stores (see 2509020025), Assemblymember Chris Ward (D) punted AB-446 to next year, he said in a statement Thursday.
AI Privacy
AI privacy concerns are growing as copyrighted works and personal data are used to train, optimize and operate machine learning systems. From facial recognition to inference risks, AI applications often test the limits of existing privacy laws. Regulators worldwide are developing safeguards to govern data use, bias, transparency and consent in AI development. This page tracks legislation, regulatory frameworks and enforcement actions at the intersection of AI and data protection.
Congress should pass a federal privacy law that preempts state measures, NetChoice said Thursday in a series of policy recommendations for lawmakers at both levels as the tech association issued its "Digital Safety Shield for America."
Workers won’t get a right to appeal automated decisions under an amended version of a California bill (SB-7) regulating employers’ use of automated decision systems (ADS). The Assembly Appropriations Committee advanced the legislation to the floor Friday despite Republican objections (see 2508290005).
Draft regulations to implement the New Jersey Data Protection Act (NJDPA) may exceed the statute, said advertising, tech industry and news media groups in comments to the New Jersey attorney general’s office’s Division of Consumer Affairs. They suggested that New Jersey try to align more closely with other states that have comprehensive privacy laws.
The EU General Court threw out a challenge to the EU-U.S. Data Privacy Framework (DPF) on Wednesday, confirming that the U.S. adequately protects Europeans' personal data and that trans-Atlantic data flows can continue.
North Carolina will aim to upgrade its AI literacy, governance and deployment through an executive order by Gov. Josh Stein (D), his office said Tuesday. The order creates an AI council, an “AI Accelerator” and AI oversight teams within each state agency.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
Canada's Office of the Privacy Commissioner will fund seven research projects on how smart devices handle personal information, it said Thursday.
Colorado's AI Act won’t take effect until June 30, 2026. Gov. Jared Polis (D) signed SB-4 into law on Thursday after previously applauding legislators for trying to make changes to the measure in a special session (see 2508270009).
A California bill to set notification deadlines for data breaches passed the Senate unanimously on Thursday and could be headed to the governor’s desk soon. The Senate passed SB-446 on May 28 and it’s been sailing through the Assembly on consent agendas since then (see 2508200033). Meanwhile, state fiscal hawks advanced many privacy and AI bills, while holding back some others, at committee meetings Friday.