Vermont and Washington state will soon introduce comprehensive privacy bills, while Connecticut will have a bill that would add data minimization rules and make other changes to its 2022 law, legislators told Privacy Daily ahead of sessions starting this month. Also, legislators in Oklahoma and South Carolina prefiled bills last month for the 2025 legislative sessions. Additional privacy bills are expected this year in several other states, said privacy lawyers and consumer advocates in other interviews.
State AG Privacy Enforcement
U.S. state attorneys general are playing a growing role in privacy enforcement, using their broad consumer protection powers to investigate and penalize companies over data misuse, dark patterns and algorithmic harm. From California to Texas, AGs are issuing subpoenas, negotiating multimillion-dollar settlements, and teaming up on multistate actions. Enforcement often goes beyond privacy statutes, relying on deceptive or unfair practices laws to target violations. This page tracks major enforcement actions, legal theories and cross-state efforts shaping how privacy laws are interpreted and applied at the state level.
to
articlessource documents
Refine Trend Search
Clear Terms
Search Primer
Term list: Separate terms with spaces, not commas or semicolons.
Multi-word term: Place inside quotes to ensure an exact match (e.g. "private right of action").
Acronyms: Use all capital letters to ensure the search is not looking for that letter sequence instead. (e.g., HIPAA).
Required term: If a term must be included in any resulting articles, prefix it with a plus sign (e.g., FTC +rule).
Excluded term: If a term should be excluded from any articles being found, prefix it with a minus sign (e.g., AI -deepfake).
Simplest form: Use the simplest form of a term s (e.g. "lawsuit" instead of "lawsuits").