A comprehensive privacy law taking effect Tuesday in Tennessee may appear business-friendly compared with similar measures in other states, but privacy lawyers note that it also contains some of the highest penalties for noncompliance. Companies could avoid a Tennessee crackdown by taking advantage of a novel safe harbor in the law, Mintz’s Cynthia Larose told Privacy Daily.
Maine has joined a growing list of states in which comprehensive privacy bills stalled in 2025. However, Rep. Amy Kuhn (D), the Maine Judiciary Committee’s House chair, told Privacy Daily on Thursday that her LD-1822 will return in 2026.
Disclosing private data for certain unlawful reasons will be a crime in Oregon starting next year. Gov. Tina Kotek (D) on Tuesday signed SB-1121, which makes unlawful disclosure of private information a Class B misdemeanor.
Data brokers face new requirements starting Sept. 1 under two Texas bills that Gov. Greg Abbott (R) signed Friday.
Maine is expected to continue consideration of comprehensive privacy legislation in an extended session next week, state Rep. Rachel Henderson (R) told us Friday.
The New York Child Data Protection Act (NYCDPA), which took effect Friday, is unique for many reasons, including its age-flag requirement and because New York lacks a comprehensive law covering users of all ages, experts said in interviews. However, like a good deal of privacy and online safety regulations, it may face legal challenges, said Jason Oliveri, data privacy partner at Hinshaw & Culbertson.
Businesses should be aware of unusual requirements in New Jersey draft rules for implementing the state’s comprehensive privacy law, several law firms warned in blog posts this month.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
A tech industry group on Friday ruled out the possibility that a rulemaking would alleviate its concerns with Vermont’s new age-appropriate design code law. Gov. Phil Scott (R) signed S-69 on Thursday (see 2506120094) despite vetoing a similar proposal last year. Businesses of all sizes will have to comply with the Vermont AADC or potentially face AG enforcement or lawsuits from individuals via a private right of action in the state's existing consumer protection law.
The Oregon House supported making it a crime to unlawfully disclose private data. Members voted 54-2 Thursday in favor of SB-1121, which cleared a House committee in late May (see 2505290041).