While a longstanding federal health law doesn't cover as much data as some people think, more recent state measures may be overcompensating and over-complicating health care privacy, said WilmerHale privacy attorney Kirk Nahra on a Tuesday webinar. Daniel Solove, George Washington University Law professor, predicted “we're going to see ... this complicated landscape get even more complicated.”
Massachusetts senators advanced a comprehensive privacy bill that includes a private right of action and Maryland-like data-minimization requirements. On Monday, the Senate side of the legislature’s joint Advanced Information Technology Committee advanced to the Ways and Means Committee a new draft of the Massachusetts Data Privacy Act (S-2516) that replaces bills by the committee’s Senate Chair Michael Moore (D), Senate Majority Leader Cynthia Creem (D) and Sen. William Driscoll (D). Some alternatives remain pending, including legislation by Sen. Barry Finegold (D), his spokesperson told Privacy Daily.
Montana’s comprehensive privacy law will apply to more businesses and add regulations for children’s data, effective Oct. 1. Gov. Greg Gianforte (R) last week signed a bill (SB-297) amending the Montana Consumer Data Privacy Act to make those and other changes.
Google's nearly $1.4 billion settlement with Texas solidifies the state's status as an aggressive privacy enforcer, lawyers and consumer privacy advocates said Monday. Texas announced the settlement Friday in a case involving Google's allegedly unlawful tracking and collection of users' personal information, including geolocation and biometric data (see 2505090071).
The House Commerce Committee on Tuesday will mark up budget reconciliation language that would impose a 10-year moratorium blocking states from enforcing AI regulations, Chairman Brett Guthrie, R-Ky., announced Friday night.
A government privacy bill in New Hampshire is dead. The legislature updated the status of HB-522 Thursday to “BILL KILLED” after the Senate Judiciary Committee placed the legislation on the execution stand a week prior. A proposed supplement to New Hampshire’s comprehensive privacy law also recently died (see 2505020036).
Incorporating children's and teen safety into privacy has led to a variety of approaches under state law, said two Latham Watkins attorneys on a panel at the Privacy + Security Forum spring academy Friday. An age-gate is the best way for companies to ensure compliance with all of them, they added.
Employing reasonable practices and security measures can help companies comply with the multitude of state privacy laws, said HP and Maryland attorneys during a panel at the Privacy + Security Forum Spring Academy on Thursday.
An Oregon Senate panel Tuesday cleared a House-passed bill requiring carmakers to follow state privacy laws concerning collecting and using drivers' personal data (see 2504140015). Without objection, the Senate Labor Committee agreed to send HB-3875 to the floor.
The Colorado legislature agreed Monday to add precise geolocation data to the definition of sensitive data in the state's comprehensive privacy law. Lawmakers passed an immigration bill (SB-276) that would amend the Colorado Privacy Act (CPA) to do that and prohibit controllers from selling consumers’ sensitive data without opt-in consent.