Key point: Bills advanced last week in Connecticut, Colorado, and California, while Florida lawmakers will return for a special session this week and consider an AI Bill of Rights.
Below is the 15th update on the status of proposed state
Key point: Connecticut’s Senate passed a bill to amend the state’s consumer data privacy law and create a new data broker registration law, while bills advanced in California, Colorado, Delaware, and Louisiana.
Below is the 15th update on the status
With the influx of new state AI laws making compliance more complicated, we have created a new state AI law tracker map.
The map focuses on laws that can directly or indirectly affect private-sector AI development and deployment. As
Key point: The amendment significantly expands the existing law’s applicability, redefines “covered design feature,” creates two new prohibitions, and adds a new deletion right.
On April 17, 2026, Nebraska Governor Jim Pillen signed LB 838 into law. The omnibus bill addresses
In Parts 1-3 of this series, we covered the mechanics of the CCPA’s new cybersecurity audit requirement: who is covered, when audits are required, what must be audited, who can perform the audit, how it fits with existing security frameworks,
Key point: Nebraska (chatbot) and Maine (health) enacted laws last week, while more than a dozen bills advanced in other states.
Below is the 14th update on the status of proposed state AI legislation in 2026. These posts track state
Key point: Alabama became the 21st state to enact a broader consumer data privacy law, Kentucky and Virginia finalized amendments to their consumer data privacy laws, and Nebraska amended its Age-Appropriate Design Code Act.
Below is the 14th update on
On January 1, the California Delete Act went into effect establishing new requirements for entities that qualify as “data brokers” under the law. Beginning August 1, covered businesses will need to process deletion requests through the California Privacy Protection Agency’s
Key point: Alabama becomes the 21st state to enact a broad consumer data privacy law with a law that is one of the more business-friendly laws passed to date.
According to Privacy Daily, on April 16, 2026, Alabama Governor Kay
Key Points: An August 2025 federal court ruling has opened the door for plaintiffs to use alleged inaccuracies or misrepresentations in a company’s privacy policy and other privacy disclosures as the basis for a federal wiretapping claim under the Electronic
