Vermont and Washington state will soon introduce comprehensive privacy bills, while Connecticut will have a bill that would add data minimization rules and make other changes to its 2022 law, legislators told Privacy Daily ahead of sessions starting this month. Also, legislators in Oklahoma and South Carolina prefiled bills last month for the 2025 legislative sessions. Additional privacy bills are expected this year in several other states, said privacy lawyers and consumer advocates in other interviews.
Comprehensive Privacy Bills
Comprehensive privacy laws set baseline rules for how personal data is collected, processed and protected. In the absence of comprehensive U.S. federal privacy legislation, California, Colorado, Virginia, and a number of other U.S. states have passed their own consumer privacy legislation. This page tracks key legislative proposals, compares state and federal approaches, and outlines core compliance obligations for businesses operating in the U.S. and abroad. More states are considering bills broadly covering many industries this year (see map).
to
articlessource documents
Refine Trend Search
Clear Terms
Search Primer
Term list: Separate terms with spaces, not commas or semicolons.
Multi-word term: Place inside quotes to ensure an exact match (e.g. "private right of action").
Acronyms: Use all capital letters to ensure the search is not looking for that letter sequence instead. (e.g., HIPAA).
Required term: If a term must be included in any resulting articles, prefix it with a plus sign (e.g., FTC +rule).
Excluded term: If a term should be excluded from any articles being found, prefix it with a minus sign (e.g., AI -deepfake).
Simplest form: Use the simplest form of a term s (e.g. "lawsuit" instead of "lawsuits").