Key point: With a private right of action and ambiguous and undefined terms, businesses deploying consumer-facing interactive AI will want to ensure they are not unintentionally triggering the bill’s provisions.
On March 11, 2026, the Washington legislature passed HB 2225
Key point: Last week, the Washington and New York legislatures each passed two bills; chatbot bills advanced in Georgia, Hawaii, and Tennessee; the Hawaii House passed a pricing bill while Colorado and Massachusetts committees advanced pricing bills; health care-related AI
Key point: Last week, consumer data privacy bills advanced in Alabama and Kentucky, Vermont’s data broker amendment bill passed a committee vote, and Hawaii’s Senate passed a bill prohibiting the sale of geolocation information and internet browser information without consent.
Join us for the first installment of our series, “Data Brokers Under Fire: Litigation and Compliance Strategies to Help Temper the Flames.”
Key point: If enacted, the bill will require GenAI systems to provide a conspicuous warning that GenAI outputs may be inaccurate.
On March 9, 2026, the New York legislature passed A 3411, which requires generative artificial intelligence (GenAI) systems
Key point: (1) Courts grapple with nonstatutory damage claims in “broken banner” cases; (2) Courts dismiss CIPA claims where plaintiffs failed to explain delays; (3) New privacy litigation trend takes off as two courts deny motions to dismiss under Washington’s Commercial
This five-part series provides an introductory roadmap to the California Consumer Privacy Act’s (CCPA) new cybersecurity audit requirement and the California Privacy Protection Agency’s (CalPrivacy) implementing regulations.
Key point: With a private right of action, statutory damages, and ambiguous and undefined terms, businesses deploying consumer-facing interactive AI will want to make sure they are not unintentionally triggering the bill’s provisions.
On March 5, 2026, Oregon’s legislature passed
Key point: Last week, Oregon’s legislature passed a chatbot bill, Utah’s legislature passed a provenance bill, Washington’s legislature is on the cusp of passing both a chatbot and provenance bill, and Arizona’s Senate passed a provenance bill.
Below is the
Key point: Last week, Maine’s Senate passed a consumer data privacy bill while the Virginia and Utah legislatures passed bills amending their existing consumer data privacy laws.
Below is the eighth update on the status of proposed state privacy legislation
