A Hawaii data privacy bill that state Sen. Chris Lee and five other Democrats (SB-1037) introduced Friday generally follows other comprehensive state bills in the mold of Virginia or Connecticut.
The New York Senate voted 49-10 Tuesday to approve a sweeping health privacy bill (S-929) similar to Washington state’s My Health My Data law.
In what may be the first state enforcement action under a comprehensive privacy law, Texas Attorney General Ken Paxton (R) sued Allstate for the alleged unlawful collection, use and sale of the location data from Texans’ cellphones through software secretly embedded into mobile apps like Life360. Allstate and its subsidiary data analytics company Arity used the data to raise insurance rates, Paxton alleged at the Texas District Court of Montgomery County.
New York state legislators opened their 2025 session Wednesday, introducing comprehensive and healthcare-focused privacy bills, among other measures related to consumer data. Assemblymember Nily Rozic (D) offered the 2025 version of the New York Privacy Act. However, some of it is "not aligned with other comprehensive privacy laws,” which could make compliance a challenge for businesses, warned Hinshaw & Culbertson privacy attorney Cathy Mulrow-Peattie in an email Wednesday.
Businesses must make incremental changes to comply with five state privacy laws effective this month, privacy experts said in interviews. Comprehensive laws took effect Jan. 1 in Delaware, Iowa, Nebraska and New Hampshire. A New Jersey law becomes effective Jan. 15, with that state’s attorney general office’s consumer affairs division soon expected to open a rulemaking.