Vermont and Washington state will soon introduce comprehensive privacy bills, while Connecticut will have a bill that would add data minimization rules and make other changes to its 2022 law, legislators told Privacy Daily ahead of sessions starting this month. Also, legislators in Oklahoma and South Carolina prefiled bills last month for the 2025 legislative sessions. Additional privacy bills are expected this year in several other states, said privacy lawyers and consumer advocates in other interviews.
Private Right of Action
State privacy laws generally leave enforcement to attorneys general, but legislators in many states continue to propose including a private right of action. Inclusion of a PRA in more sector-specific laws like the Illinois Biometric Information Privacy Act (BIPA) have resulted in many lawsuits.
Search Primer
Term list: Separate terms with spaces, not commas or semicolons.
Multi-word term: Place inside quotes to ensure an exact match (e.g. "private right of action").
Acronyms: Use all capital letters to ensure the search is not looking for that letter sequence instead. (e.g., HIPAA).
Required term: If a term must be included in any resulting articles, prefix it with a plus sign (e.g., FTC +rule).
Excluded term: If a term should be excluded from any articles being found, prefix it with a minus sign (e.g., AI -deepfake).
Simplest form: Use the simplest form of a term s (e.g. "lawsuit" instead of "lawsuits").