😎

There is a fascinating gap between how California policymakers talk about California's privacy law ('We're the strongest in the nation, it's not even up for debate! 😤') and how California professional legislative staff talk about California's privacy law...

TODAY - Webinar – The State Privacy Law Multiverse – register free teachprivacy.com/webinar-the-... (Tues, April 29, 2 PM ET) Daniel Solove chats with Keir Lamont (FPF)

Thinking about the difference between a circle with a 1,750 foot radius vs a circle with a 1,850 foot radius for absolutely no reason whatsoever...

A California Agency meeting later today could prove to be one of the most significant events for U.S. AI governance this year. Get caught up to speed in today's edition of The Patchwork Dispatch. www.linkedin.com/pulse/state-...

The Utah Consumer Privacy Act's phantom "data minimization" requirement (it appeared in a prior draft, was taken out, but the enacted law left it in the section header) is the state privacy legislation equivalent of a Paper Town. Here it is popping up in a recent North Carolina bill:

Hot off the presses: The Patchwork Dispatch brings you the latest in state data privacy legislation, enforcement, and litigation! www.linkedin.com/pulse/state-...

The newest edition of The Patchwork Dispatch breaks down all the latest in US state privacy law. www.linkedin.com/pulse/state-...

We have a first amendment to a comprehensive state data privacy law this year as Utah votes to add a right to correct to the UCPA with HB 418. The bill's focus, however, is on interoperability requirements for social media companies. le.utah.gov/~2025/bills/...

Folks, state legislatures are rapidly advancing significant new proposals on consumer privacy, child online safety, and AI. Read the latest developments here: www.linkedin.com/pulse/state-...

New details around comprehensive consumer privacy efforts in the 119th Congress today with the announcement of a Republican Data Privacy Work Group in House E&C. Lawmakers highlight the importance of a national privacy framework to advancing U.S. global leadership in AI.

Check out this new comparison chart from me @baileysanchez.bsky.social and @keirlamont.bsky.social. We compare NYHIPA to two alternative frameworks—MHMD and the consumer health data protections in Connecticut's comprehensive privacy law. Read it here: www.linkedin.com/posts/jordan...

It has been a pretty important couple of weeks in state privacy and AI law. I wrote about it here:State Privacy & AI News - 2/7 www.linkedin.com/pulse/state-...

Recent Data Privacy Days in California have been marked by notices of violation regarding financial incentives and investigative sweeps of streaming services and mobile apps... What will we get this year?

Today's edition of The Patchwork Dispatch explores some of the compliance challenges posed by the newly passed New York Health Information Privacy Act (S929). www.linkedin.com/pulse/state-...

Wondering where the US may go on AI legislation this year? So is everyone else. Here is @julespolonetsky.bsky.social on the different paths we may take, and how state legislators are doing their homework on the topic www.techpolicy.press/2025-may-be-...

The fifth state comprehensive privacy bill of 2025 is the Massachusetts Data Privacy Act (SB 267) - the proposal appears informed by the federal ADPPA and APRA bills and would constitute an entirely new framework for protecting consumer data in the US. malegislature.gov/Bills/194/SD...

New year, new bills, same analysis of state privacy and AI legislative developments. Don't miss the latest edition of The Patchwork Dispatch! www.linkedin.com/pulse/state-...

Fourth state with a comprehensive privacy bill in 2025 is Pennsylvania with the bipartisan HB 78. I'm not yet seeing text, but last session Rep. Neilson, the primary sponsor, ran a WPA-style bill that passed the state house. www.palegis.us/legislation/...

The New York Health Information Privacy Act has been re-filed as S929. This is a MHMD-scale bill, but with important distinctions. Most notably, it would impose a 24hr delay following initial registration before "valid authorization" can be obtained to use health data for a non-exempt purpose.

Has the 'California Effect' come for AI law? Today Washington State Rep. Shavers introduced: - HB 1168: Generative AI training data transparency (appears modeled on CA AB 2013) - HB 1170: Synthetic content detection and disclosures (appears modeled on CA SB 942)

Congratulations to my friends in Delaware, Iowa, New Hampshire, and Nebraska who are waking up to new comprehensive consumer privacy rights and protections 🥳

Recent developments in Colorado and Texas shine a light on key points tension in the debate over regulating high-risk AI systems, I explore the topic here: www.linkedin.com/pulse/state-...

Its looking like I'll survive my 4th straight year of never making a legislative prediction. But you can read all about my questions for the state privacy landscape here: fpf.org/blog/five-bi...

The second comprehensive state privacy bill of the 2025 cycle is Oklahoma HB 1012 from Rep. West. This framework dates back to at least 2021 and has passed the state house in prior sessions, but hitherto failed to gain traction in the senate. www.oklegislature.gov/BillInfo.asp...

Speaker Johnson wants a win for Trump on KOSA. From a news conference today: "We are very optimistic that if it's not done this year, that we can do that early next year with our Republican majorities because it's the Republican party that has been working aggressively to protect children online."

Buckle up folks, the first (arguably) comprehensive state privacy bill of the 2025 cycle has officially arrived as South Carolina H3401, a re-file from Rep. Guffey. H3401 is heavily influenced by the Florida Digital Bill of Rights Act with narrow applicability. www.scstatehouse.gov/sess126_2025...

I am not going to blow anyone's mind with this take but today's news from the federal agencies has got me thinking, yet again, that the U.S. should adopt some sort of modern federal baseline data privacy law.

Disappointing from the CPPA - The "ball is in your court" idiom derives from tennis, not basketball!

I know some people who are going to feel some kind of way about requiring businesses to conduct "commercially reasonable age verification" as an element of "privacy by default" New York Children's Online Safety Act (S9953)

Thrilled to launch a new report from me: "Anatomy of State Comprehensive Privacy Law: Surveying the State Privacy Law Landscape and Recent Legislative Trends." This report overviews the existing landscape and highlights important legislative trends. ⏩ Read it here: fpf.org/blog/fpf-unv...

👋Howdy new followers! If you found me though one of those tech policy "starter packs" you might be interested in a fortnightly newsletter I write on U.S. state privacy and AI legislation. I just published a new edition, check it out here: www.linkedin.com/pulse/state-...

The California Privacy Protection Agency board has voted 4-1 to initiate formal rulemaking on risk assessments, automated decisionmaking technology, and cybersecurity audits. Read my overview of a contentious hearing here: www.linkedin.com/posts/keirla...

Blue Sky Posting.