Increased FTC enforcement and expanding state regulatory requirements mean it's crucial that advertisers ensure their consumer health data activity complies with consumer privacy laws, said panelists during a Wiley health advertising webinar Tuesday.
Reducing the number of exemptions in states’ comprehensive privacy laws, “particularly where they may seem arbitrary and carve out protections for large industries, may serve as low-hanging fruit for regulators,” said University of California-Los Angeles law students Nicola Haubold and J.Y. Khoo in a Monday op-ed for TechPolicy.press.
The Oregon legislature approved an automotive privacy bill Thursday, while another possible change to the state’s comprehensive privacy bill edged closer to the finish line.
Alabama’s comprehensive privacy bill ran out of time to pass the legislature this year, so sponsor Rep. Mike Shaw (R) is looking toward 2026, he told Privacy Daily Friday. The state legislature adjourned earlier this week.
Businesses must traverse an expanding “minefield of state and international regulations,” said BigID CEO Dimitri Sirota in an interview last month at the IAPP Global Privacy Conference in Washington. The emergence of AI has also created privacy compliance challenges -- but the emerging technology could also make some aspects of the data protection profession more efficient, he said.
The Maine Legislature’s joint Judiciary Committee will probably meet at least once more to continue discussing the content of a possible comprehensive state privacy law, House Chair Amy Kuhn (D) said before the committee began delving into differences between three rival proposals during a work session Wednesday. While referring to a side-by-side comparison at a livestreamed work session, the panel zeroed in on a key choice between taking a data-minimization or consent-based approach to privacy. Some members questioned not including a private right of action.
During a 26-hour markup Tuesday, the House Commerce Committee approved reconciliation language that would set a 10-year moratorium on enforcement of state AI laws (see 2505130069). Senate Commerce Committee Chairman Ted Cruz, R-Texas, told us Wednesday that discussions are ongoing in the upper chamber about moratorium language.
The Connecticut Senate passed legislation to update the state's comprehensive privacy law. After a 26-9 vote Wednesday, SB-1356 goes to the House.
While a longstanding federal health law doesn't cover as much data as some people think, more recent state measures may be overcompensating and over-complicating health care privacy, said WilmerHale privacy attorney Kirk Nahra on a Tuesday webinar. Daniel Solove, George Washington University Law professor, predicted “we're going to see ... this complicated landscape get even more complicated.”
Massachusetts senators advanced a comprehensive privacy bill that includes a private right of action and Maryland-like data-minimization requirements. On Monday, the Senate side of the legislature’s joint Advanced Information Technology Committee advanced to the Ways and Means Committee a new draft of the Massachusetts Data Privacy Act (S-2516) that replaces bills by the committee’s Senate Chair Michael Moore (D), Senate Majority Leader Cynthia Creem (D) and Sen. William Driscoll (D). Some alternatives remain pending, including legislation by Sen. Barry Finegold (D), his spokesperson told Privacy Daily.