Signaling a possible trend, an increasing number of state legislators are filing AI discrimination bills. Similar to Colorado's nation-first AI law, the bills focus on preventing businesses from discriminating by using AI algorithms.
Many companies are moving toward a national approach to privacy compliance to account for the growing patchwork of state laws, Wiley attorneys said in a blog post Thursday.
Del. Bonita Anthony (D) offered a bill in the Virginia legislature Wednesday that would amend the state’s comprehensive privacy law that went into effect in 2023. The proposed amendments add and define the terms “secondary use” and “user-generated content,” as well as add reporting requirements for controllers and processors of personal data.
New Hampshire's House Judiciary Committee Chair Bob Lynn (R) introduced a bipartisan bill Wednesday that emphasizes citizens' expectation of privacy when their personal information is collected and used.
A Texas bill covering smart devices aims to show “people in real-time on their personal devices what data is being collected and by whom and also gives them the ability to stop the data collection,” state Sen. Bryan Hughes (R) said in an emailed statement Wednesday.
New York state legislators opened their 2025 session Wednesday, introducing comprehensive and healthcare-focused privacy bills, among other measures related to consumer data. Assemblymember Nily Rozic (D) offered the 2025 version of the New York Privacy Act. However, some of it is "not aligned with other comprehensive privacy laws,” which could make compliance a challenge for businesses, warned Hinshaw & Culbertson privacy attorney Cathy Mulrow-Peattie in an email Wednesday.
A reintroduced Connecticut AI bill aims to build on the state’s 2022 comprehensive privacy law, state Sen. James Maroney (D), the privacy law’s author, said in an interview. Maroney’s second attempt at establishing AI requirements will be a priority bill for majority Democrats in the Connecticut Senate next year, Maroney, Senate President Pro Tempore Martin Looney and Majority Leader Bob Duff said in a joint announcement last month.
Businesses must make incremental changes to comply with five state privacy laws effective this month, privacy experts said in interviews. Comprehensive laws took effect Jan. 1 in Delaware, Iowa, Nebraska and New Hampshire. A New Jersey law becomes effective Jan. 15, with that state’s attorney general office’s consumer affairs division soon expected to open a rulemaking.
Delaware’s new privacy law gives the state AG office “important tools to enforce consumers’ data privacy and security,” said AG Kathy Jennings (D) on Monday. The comprehensive privacy law took effect Jan. 1 and will be enforced exclusively by Delaware DOJ’s Fraud and Consumer Protection Division.
New Republican leadership for the House and Senate Commerce committees could mean a full reset for federal privacy legislation in 2025. That’s according to interviews with incoming Senate Commerce Committee Chairman Ted Cruz, R-Texas, and incoming House Commerce Committee Chairman Brett Guthrie, R-Ky.