Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching on the title or by clicking on the hyperlinked reference number.
A federal judge in California ruled Monday that a case against Google will continue, and the search engine must face claims that it tracked children’s YouTube activity to show them targeted ads, in violation of their privacy.
New-for-2025 comprehensive privacy bills appeared in Illinois and Oklahoma this week. In Illinois, state Sen. Sue Rezin's (R) proposed measure seems based on California’s law. The Oklahoma proposal, from Sen. Brent Howard (R), takes a Virginia-style approach. Privacy Daily is tracking comprehensive bills in at least five states.
Websites could soon be sued in Oregon for not keeping kids younger than 18 off pornographic websites, with a penalty up to $5,000 per violation. The Oregon House Monday had its first reading of a bill (HB-2032) mandating age verification.
Privacy protections might be sidelined during the Trump administration in order to focus on other emerging technology, said Mallory Knodel, founder of the Social Web Foundation, in a Friday piece for TechPolicy.Press.
A private right of action appeared in a New York state health privacy bill introduced Thursday. Another lawmaker introduced a biometric privacy bill enforced by the state AG.
The second U.S. state privacy law could be updated this year. Virginia’s legislative session opened Wednesday with a bill by Del. Michelle Maldonado (D) that would add protections for teens, include support for universal opt-out mechanisms and revise other parts of the 2021 Virginia Consumer Data Protection Act. Maldonado's measure would also add an AI section called the "Artificial Intelligence Training Data Transparency Act,” which includes a private right of action.
New York state legislators opened their 2025 session Wednesday, introducing comprehensive and healthcare-focused privacy bills, among other measures related to consumer data. Assemblymember Nily Rozic (D) offered the 2025 version of the New York Privacy Act. However, some of it is "not aligned with other comprehensive privacy laws,” which could make compliance a challenge for businesses, warned Hinshaw & Culbertson privacy attorney Cathy Mulrow-Peattie in an email Wednesday.
Consumer advocates want to build a coalition behind a model state privacy bill that adds protections beyond current state laws, said Electronic Privacy Information Center (EPIC) and Consumer Reports (CR) officials in a Monday column in TechPolicy.press. The groups’ model, unveiled in September, is based on Connecticut's law, with additions including a private right of action, tightened data minimization requirements and increased protections for children and sensitive data. “EPIC and Consumer Reports hope to use the model bill to build on last session’s momentum and support lawmakers seeking strong privacy protections for their constituents,” wrote EPIC Deputy Director Caitriona Fitzgerald and CR Policy Analyst Matt Schwartz. “We are actively seeking new partners to join our coalition -- both organizations and constituents fed up with the status quo.” A forthcoming Washington state privacy bill will be based on the EPIC/CR model (see 2412300043).
Passing an anti-TikTok bill with a private right of action will be a priority for Virginia Attorney General Jason Miyares this legislative session, the Republican said Tuesday. Miyares supported a yet-to-be-numbered bill by Del. Jay Leftwich (R). The AG office said the bill would establish “a private cause of action for parents against TikTok’s deceptive practices and addresses concerns related to data privacy, child exploitation, and security threats.” Leftwich and TikTok didn’t comment.