A coalition of 17 state AGs have written to the Senate Committee on Homeland Security and Government Affairs Committee and the House Committee on Oversight and Accountability to express concerns with AI-driven mass surveillance and government purchase of large datasets: coag.gov/app/uploads/...

For the first time in nearly two years, we have a new state comprehensive privacy law! Oklahoma SB 546 was signed over the weekend, making it the long-awaited 20th state comprehensive privacy law. ⏩ See my blog post: fpf.org/blog/privacy...

There's been a recent uptick in federal legislative activity on privacy lately. Continuing that trend, Rep. Lofgren (D-CA) released a comprehensive privacy bill this week. Read the bill here: lofgren.house.gov/sites/evo-su...

I've entered the "makes collages about the rule of law" phase of my life, apparently

Representative Trahan's (D-MA) office has released a new report, "Privacy, Trust, and Effective Government: A Bipartisan Blueprint for Modernizing the Privacy Act." trahan.house.gov/uploadedfile...

The FTC announced that it sent warning letters to 13 data brokers reminding them of their responsibilities under the Protection Americans' Data from Foreign Adversaries Act (PADFAA), which (1/2)

A little roundup of some professional news: 🟢 This year I am serving as the Young Privacy Professional for the Southern Wisconsin IAPP KnowledgeNet chapter. Our first event of the year is next Friday, February 13, where I will be hosting "I ❤️ Privacy" virtual trivia. iapp.org/community/lo...

A proposed constitutional amendment adding a right to privacy introduced in Wisconsin: www.channel3000.com/news/wiscons... Interested in state constitutional rights to privacy? I recommend Tiffany Li's excellent article from last fall: georgialawreview.org/wp-content/u...

The agenda is up for the FTC's February 26 workshop on "Consumer Injuries and Benefits in the Data-Driven Economy." www.ftc.gov/news-events/...

FPF announced the winners of our annual Privacy Papers for Policymakers Awards! 🏆 The #PPPM Awards recognize leading U.S. & international privacy scholarship. Learn more & save the date for the upcoming webinars. fpf.org/press-releas... ✨We'll be posting more here on @bsky.app - follow for updates!

Happy Data Privacy Day! As always, a busy day for me and my colleagues ⬇️

More details on the #AgeVerification FTC workshop next week. Not a *lot* of opposition to age verification generally, but at least some panelists will bring some well-needed nuance! #Privacy #ArtificialIntelligence

Feeling the loss of WisEye today as I'm unable to make it to a hearing on less than 30 minutes notice

Excellent article from Brenda Leong and Andrew Eichen on fiduciary duties and AI agents: www.zwillgen.com/artificial-i...

What does 2026 hold for privacy and AI legislation? Check out this year's iteration of FPF's popular "Five Big Questions (and Zero Predictions)" blog post! ⏩ fpf.org/blog/five-bi...

Thrilled to share an updated version of my state privacy law report — Anatomy of a State Comprehensive Privacy Law: Charting The Legislative Landscape. Like last year's edition, this report provides an overview of the state comprehensive privacy laws and analysis of ongoing legislative trends.

Thrilled to share an updated version of my state privacy law report — Anatomy of a State Comprehensive Privacy Law: Charting The Legislative Landscape. Like last year's edition, this report provides an overview of the state comprehensive privacy laws and analysis of ongoing legislative trends.

The New York Health Information Privacy Act (S929), a broad My Health My Data -like consumer health privacy bill, was delivered to the Governor yesterday. This bill may have slipped off folks' radar, as it has been 313 days since it passed the legislature. The sign/veto deadline is now active.

For any students out there looking to get experience in #privacy #dataprotection #techpolicy, FPF is now accepting applications for Summer 2026 interns! Details here: fpf.org/us-policy-in...

Delighted to share that I received a Fellow of Information Privacy (FIP) designation from the IAPP today! It feels like just yesterday I was studying for my first IAPP certification as a rising 3L.

Mozilla announces new Firefox protections against fingerprinting ⬇️ blog.mozilla.org/en/firefox/f...

New from me and David Stauss: A look back at what happened in state data privacy law in 2025. No new comprehensive laws; lots of rulemaking; increased enforcement activity; and more. Read it here: iapp.org/news/a/retro...

Yet another CCPA settlement announced today—the fifth of the year, by my count, and a second from the CA DOJ. oag.ca.gov/news/press-r... Details: $530K civil penalty and injunctive terms with SlingTV, mostly concerning insufficient and overly burdensome opt-out procedures.

Hot off the presses: Issue brief by me and my colleague Justine on new regulations from @calprivacy.bsky.social concerning automated decisionmaking technology, risk assessments, and cybersecurity audits 🔗 fpf.org/wp-content/u...

📢 NEW: EPIC published a new report today that examines how state Attorneys General are advancing privacy enforcement across the U.S. (2020–2024). 220+ cases. 35 letters. 20 investigations. Read more: epic.org/state-ag-pri...

Added to my reading list: New report from EPIC on "State Attorneys General & Privacy: Enforcement Trends, 2020-2024" 🔗 epic.org/wp-content/u...

For all the #privacy academics out there: In case you missed it, submissions are open for FPF's annual Privacy Papers for Policymakers (PPPM) award! You have until Oct. 30 to submit the best privacy scholarship from the past year. ⏩ See details here: fpf.org/privacy-pape...

The Florida Attorney General filed a lawsuit alleging violations of the Florida Digital Bill of Rights. The prayer for relief includes civil penalties "up to $150,000 per violation," which is SIGNIFICANT. Read the complain here: s3.documentcloud.org/documents/26...

Even in the "off-season" for legislative tracking, California is keeping me busy. Governor Newsom signed several privacy bills today, including AB 566, requiring businesses that develop a browser to include a user-enabled setting to send an opt-out preference signal ⬇️ www.gov.ca.gov/2025/10/08/g...

Minnesota and New Hampshire joined the "Consortium of Privacy Regulators," according to CalPrivacy. The consortium now includes California, Colorado, Connecticut, Delaware, Indiana, New Hampshire, New Jersey, Minnesota, and Oregon.

It's an important day in state privacy law as both the Maryland Online Data Privacy Act and youth privacy amendments to the Colorado Privacy Act go into effect. ⏩ Looking to stay on top of all these state laws? See FPF's effective dates chart at fpf.org/statelaws.

Excited to share that I have been promoted to Senior Policy Counsel! Much like the state privacy law landscape, I've grown and evolved during my two years at FPF, and I'm excited to take on new responsibilities. As always, I'm grateful to my colleagues for their support and confidence in me.

The Massachusetts Data Privacy Act (S.2608) passed the Senate 40-0 today, with several adopted amendments.

The 2025 state legislative session is winding down but not over yet. Last week the Massachusetts Senate Committee on Ways & Means favorably reported a new comprehensive privacy bill, S.2608, as a substitute for S.2516. Read it here: malegislature.gov/Bills/194/S2... What changed between drafts?

Some personal news: I wanted to share that I recently relocated from Washington, DC back to Madison, WI, a city near-and-dear to my heart. I am extremely grateful to be continuing my role with FPF remotely, and I look forward to connecting with privacy and tech policy folks in Wisconsin!

One of many important privacy bills to follow in California this week as they approach the end of the legislative session:

Pleased to see my 2024 report on the state comprehensive privacy laws cited in this recent working paper by the U.N.'s International Labour Organization: www.ilo.org/sites/defaul...

We are days away from the Minnesota Consumer Data Privacy Act going into effect! Curious how this law fits into the broader state comprehensive privacy law landscape? Check out my blog post from when this law was signed last year: fpf.org/blog/the-nor...

Materials are published the the CPPA's July 24 board meeting: cppa.ca.gov/meetings/mat...

We are hiring a Privacy Counsel for TikTok's Americas Public Policy team! This is a great opportunity to work on a unique set of privacy issues at a pivotal moment for TikTok. lnkd.in/eYQgKxzb

Happening today: AEI and CDT are hosting a panel on "Federal Data Consolidation: Protecting Civil Liberties in the Digital Age" Livestream available here: cdt.org/event/federa...

The next CPPA board meeting is scheduled for Thursday, July 24. ⏩ The agenda includes discussion of and possible action on important ongoing rulemaking initiatives, including ADMT, risk assessments, cybersecurity audits, and the DROP requirements. ⏩ Agenda here: cppa.ca.gov/meetings/age...

FPF's recently updated effective dates chart is a one-stop-shop for key dates and links to existing privacy laws, enacted amendments, and broadly applicable sectoral laws (mostly health and youth privacy focused). ⏩ Find it here: fpf.org/wp-content/u...

Internship opportunity for Fall 2025: FPF recently launched The Hannah Schaller Memorial Internship by ZwillGen. This internship honors Hannah Schaller, who started her privacy career as a policy intern in the FPF D.C. Office. Learn more about the position and apply here: fpf.org/the-hannah-s...

California AG Bonta announced a new CCPA settlement today (the largest to date): oag.ca.gov/news/press-r...

In case you missed it, the Connecticut Data Privacy Act was amended yet again this year. The recently signed SB 1295 makes numerous changes to the law, including greatly expanded applicability, new consumers rights, and more. ⏩ You can read my coverage here: fpf.org/blog/the-con...

Lots of other important things happening today, but add this to your reading queue ⬇️

S.836, the Children and Teens’ Online Privacy Protection Act ("COPPA 2.0") was favorably reported out of the Senate Commerce committee today: ⏩ Bill Text www.congress.gov/119/bills/s8... ⏩ Amendment #1 www.commerce.senate.gov/services/fil... ⏩ Amendment #2 www.commerce.senate.gov/services/fil...

Interested in state policymakers' pivot towards substantive data minimization requirements tying the collection of personal data to what is necessary to provide or maintain a specific product or service requested by the consumer to whom the data relates? Read my latest report fpf.org/wp-content/u...

I'm excited to share a new a paper by me, "Data Minimization’s Substantive Turn: Key Questions & Operational Challenges Posed by New State Privacy Legislation." Read it here: fpf.org/blog/fpf-unv...