States show growing interest in privacy laws covering neural and neurotechnology data, Future of Privacy Forum (FPF) said Tuesday. Four states have enacted laws so far: Montana, California, Connecticut, and Colorado.
Businesses should map their automated decision-making technology (ADMT), review and revise privacy policies, plan for cybersecurity audits and review vendor contracts in response to California Privacy Protection Agency rules adopted July 24, some privacy law practices advised in recent client alerts. The rules are expected to be finalized without changes shortly.
The Connecticut attorney general's office is shifting from focusing on transparency and facial requirements to more in-depth work, examining whether organizations' privacy mechanisms are working and in compliance, three assistant attorneys general said during an IAPP KnowledgeNet event Tuesday.
Noting the harms social networks pose to children, several California senators supported a bill Wednesday that would add warning labels to the platforms. Though several groups and members of the public supported the legislation, several senators raised concerns that AB-56 would be challenged in court and industry attacked warning labels as an inadequate solution.
Connecticut will amend its privacy law again with what some lawyers say are significant changes. Gov. Ned Lamont (D) on Wednesday signed an omnibus (SB-1295) that contained the language of a bill (SB-1356) by Sen. James Maroney (D) updating the state’s 2022 privacy law (see 2506050004). Changes to the Connecticut Data Privacy Act (CTDPA) will take effect July 1, 2026.
The American Medical Association will support legislation and regulations to protect the privacy of individual neurological data and guard against discrimination potentially caused by neurotechnologies, the organization said Tuesday in a resolution its House of Delegates adopted.
State privacy investigators are in constant contact about potential enforcement action that goes beyond the recently launched bipartisan consortium (see 2504160037), privacy officials from California, Colorado and Texas said.
Amendments to Connecticut’s privacy law passed the legislature on Tuesday as part of a different bill that included other subjects. Changes to the Connecticut Data Privacy Act would take effect July 1, 2026, if the bill is signed by Gov. Ned Lamont (D).
Privacy regulators should begin tackling neurotechnology issues now as the devices, which establish direct computer or AI connections with human brains, move into the mass market, the International Working Group on Data Protection in Technology said. It published a working paper on data protection in connection with neurotechnologies.
The Electronic Frontier Foundation applauded Montana for being the first state to close a “data broker loophole” for law enforcement. Separately, Cooley lawyers noted Montana's leadership role among states in crafting the country's third neural privacy law.