On April 13, 2026, Virginia Governor Abigail Spanberger signed SB338 into law, amending Virginia’s Consumer Data Protection Act (VCDPA) to prohibit controllers of personal data from selling consumers’ precise geolocation data. This ban, which takes effect on July 1, 2026,
Welcome to Part Two of our series that examines the ECPA as a private right of action for privacy policy inaccuracies. In Part One of this series, we examined how a wave of state-law wiretapping litigation — predominantly under California’s
Key point: In a court filing, the Colorado attorney general states it will only enforce the law after the office finishes rulemaking on the existing law or any law the Colorado legislature passes this year amending or replacing the law.
Key point: Bills advanced last week in Connecticut, Colorado, and California, while Florida lawmakers will return for a special session this week and consider an AI Bill of Rights.
Below is the 15th update on the status of proposed state
Key point: Connecticut’s Senate passed a bill to amend the state’s consumer data privacy law and create a new data broker registration law, while bills advanced in California, Colorado, Delaware, and Louisiana.
Below is the 15th update on the status
With the influx of new state AI laws making compliance more complicated, we have created a new state AI law tracker map.
The map focuses on laws that can directly or indirectly affect private-sector AI development and deployment. As
Key point: The amendment significantly expands the existing law’s applicability, redefines “covered design feature,” creates two new prohibitions, and adds a new deletion right.
On April 17, 2026, Nebraska Governor Jim Pillen signed LB 838 into law. The omnibus bill addresses
In Parts 1-3 of this series, we covered the mechanics of the CCPA’s new cybersecurity audit requirement: who is covered, when audits are required, what must be audited, who can perform the audit, how it fits with existing security frameworks,
Key point: Nebraska (chatbot) and Maine (health) enacted laws last week, while more than a dozen bills advanced in other states.
Below is the 14th update on the status of proposed state AI legislation in 2026. These posts track state
Key point: Alabama became the 21st state to enact a broader consumer data privacy law, Kentucky and Virginia finalized amendments to their consumer data privacy laws, and Nebraska amended its Age-Appropriate Design Code Act.
Below is the 14th update on
