The intersection of data privacy and AI regulation is a fast-growing area of state law. Bills address how AI systems collect, process, and store personal data — with requirements for consent, data minimization, purpose limitation, and the right to opt out of AI profiling.
Establishing the Comprehensive Massachusetts Consumer Data Privacy Act
Bill H80 proposes the Comprehensive Massachusetts Consumer Data Privacy Act. Without the full text, no definitive conclusions can be drawn about its content or impact.
Ai, Deepfakes, Cybersecurity, Data Xfers
The bill's text is unreadable, preventing verification of claims about deepfake disclosure and cybersecurity issues.
Data brokers: data collection and deletion.
SB361 amends sections of the Civil Code regarding data brokers' obligations for data collection and deletion. Approval date requires verification with official records.
MIND Act of 2025 Management of Individuals’ Neural Data Act of 2025
SB2925 instructs the FTC to study neural data governance. The full bill text may include additional provisions affecting the study's scope and implications.
Establishes the "protect our privacy (POP) act" to impose limitations on the use of drones for law enforcement purposes; prohibits the use of drones by law enforcement at concerts, protests, demonstrations, or other actions protected by the first amendment.
The POP Act limits law enforcement's use of drones at First Amendment-protected events in New York. Exceptions and penalties are not confirmed in the bill description.
To implement the recommendations of the special commission on facial recognition technology
Bill H4640 seeks to implement recommendations of the special commission on facial recognition technology in Massachusetts.
An Act to Enact the Maine Consumer Data Privacy Act
LD1088 establishes consumer data privacy rights in Maine, with specifics to be confirmed upon review of the full bill text.
Information Practices Act of 1977.
AB1337 amends the Information Practices Act of 1977, including Section 1798.24. Verification of changes to 'personal information' in Section 1798.3 is pending full bill text.
AN ACT relating to violations of privacy.
SB280 proposes new sections in Kentucky law to address privacy violations involving identification devices and biometric technology.
Establishes consumers' foundational data privacy rights; creates oversight mechanisms; establishes enforcement mechanisms; establishes the privacy and security victims relief fund.
NY A05827: Establishes rights for consumers regarding data privacy, including access, correction, and deletion of personal data; outlines oversight and enforcement mechanisms; creates a relief fund.
Consumer protection: privacy; personal data privacy act; create. Creates new act.
SB0359 creates a new act focused on consumer data privacy in Michigan.
Task Force on Facial Recognition Privacy Protection
The bill establishes a Task Force on Facial Recognition Privacy Protection to study and make recommendations on facial recognition technology used by state and local governments.
Regulates use of artificial intelligence enabled video interview in hiring process.
This bill mandates employers to notify applicants about AI use in video interviews, obtain consent, and report demographic data.
Relating To Violation Of Privacy.
HB1226 restricts government use of facial recognition systems in Hawaii, with specific exceptions for law enforcement and public health.
Relates to prohibiting private entities from using biometric data for any advertising, detailing, marketing, promotion, or any other activity that is intended to be used to influence business volume, sales or market share or to evaluate the effectiveness of marketing practices or marketing…
This bill prohibits private entities from using biometric data for advertising and marketing purposes.
Use of fabricated media in elections.
The bill prohibits the dissemination of fabricated media in elections without consent and requires a disclaimer, with penalties escalating to a Level 5 felony under certain conditions.
A bill for an act relating to artificial intelligence, including the use of artificial intelligence to create materials related to elections and protections in interactions with artificial intelligence systems, and making penalties applicable.
HSB294 addresses AI use in election materials and interactions, with penalties mentioned but specifics unavailable.
Surveillance and Investigatory Technology Amendments
HB0606, titled 'Surveillance and Investigatory Technology Amendments,' was introduced in Utah. Specific provisions and outcomes remain unverified without the bill text.
DIGITAL FORGERIES ACT
The Digital Forgeries Act allows individuals depicted in digital forgeries to take legal action against unauthorized distribution or creation of such content.
Chief Information Officer; create an executive-appointed position.
SB2625 establishes a Chief Information Officer in Mississippi, serving in a Cabinet position, appointed by the Governor with Senate consent.
A bill for an act relating to chatbots, including deployer requirements and interactions with minors.(Formerly HSB 647.)
HF2715 mandates chatbot deployers to verify user age and obtain parental consent for minors, with penalties for non-compliance.
Establishes the "AI-Generated Content Accountability and Privacy Protection Act of 2026"
Establishes the 'AI-Generated Content Accountability and Privacy Protection Act of 2026' in Missouri. Specific details and key provisions are pending the release of the full bill text.
Ai in education
Bill H5253 introduces limitations on AI use in South Carolina public schools, requiring parental notice and consent, and emphasizing teacher oversight.
Georgia Likeness, Expression, Generative AI, and Commercial Yield (LEGACY) Act; enact
The Georgia LEGACY Act establishes property rights in an individual's likeness, with consent requirements and private right of action based on the official description, pending full bill text. Legislative findings are included.
California Consumer Privacy Act of 2018: artificial intelligence: training.
AB2877 proposes amendments to the California Consumer Privacy Act concerning artificial intelligence training. The bill is inactive and died in committee.
Enacts the "facial recognition technology study act" to study privacy concerns and potential regulatory approaches to the development of facial recognition technology.
The bill enacts the 'facial recognition technology study act' to examine privacy concerns and regulatory approaches for facial recognition technology.
ALGORITHMIC PRICING
The Preventing Algorithmic Pricing Act mandates disclosure of algorithmic pricing based on personal data, prohibits its use under specific conditions, amends the Consumer Fraud and Deceptive Business Practices Act, and limits home rule. It exempts financial services and insurers.
AN ACT relating to consumer data privacy and making an appropriation therefor.
The bill establishes consumer rights regarding personal data, including access, correction, deletion, and opting out of data sales.
Consumer Protection - Online Products and Services - Data of Children (Maryland Kids Code)
The bill mandates data protection assessments for online products likely accessed by children and sets privacy protections, including monitoring practices without alerting the child.
Consumer Protection – Online Products and Services – Data of Children (Maryland Kids Code)
The bill mandates data protection assessments for online products likely accessed by children and sets privacy protections and monitoring practices.
AN ACT relating to the protection of children using the internet.
This bill mandates high privacy settings for children's online data, requires impact assessments, and prohibits risky data practices.
Recognizing Data Privacy Day.
HR4609 recognizes Data Privacy Day in Washington. Full bill text access is required for comprehensive analysis.
AN ACT relating to privacy protection.
This bill establishes privacy protections for automated license plate readers, unmanned aircraft systems, deep fakes, and introduces provisions for identification devices in Kentucky.
AN ACT relating to violations of privacy.
SB180 restricts the use of facial recognition technology and biometric identifiers, creating legal actions and prohibiting their use as evidence.
Data broker registration: accessible deletion mechanism.
SB362 mandates data brokers in California to establish a deletion mechanism for consumer data and comply with registration requirements, enhancing consumer privacy rights.
ILLINOIS PRIVACY RIGHTS ACT
The Illinois Privacy Rights Act establishes consumer rights regarding personal data, excluding individuals in commercial or employment contexts, and applies to businesses with significant data sales revenue.
AN ACT relating to biometric data collection practices.
This bill mandates private entities to establish retention schedules for biometric data and prohibits its collection and disclosure with exceptions.
An Act Requiring Certain Retail Business Establishments To Display Signs Regarding The Use Of Facial Recognition Technology.
Retail establishments must display signs about facial recognition technology use, effective July 1, 2016.
AN ACT relating to data privacy.
This bill mandates online services to enhance privacy settings for minors, restricts notifications between 9 PM and 7 AM on school nights, and provides tools against dark patterns.
BLOCKCHAIN/BIPA-PROHIBITIONS
This bill prohibits entities from requiring blockchain-based identification or biometric information for goods or services. It is currently in the 'Introduced' status and has been re-referred to the Rules Committee.
Enacts the "facial recognition technology study act" to study privacy concerns and potential regulatory approaches to the development of facial recognition technology.
The bill enacts the 'facial recognition technology study act' to examine privacy issues and regulatory approaches related to facial recognition technology.
Consumer Protection - Artificial Intelligence Toys (Artificial Intelligence Toy Safety Act)
MD HB1261: Consumer Protection - Artificial Intelligence Toys (Artificial Intelligence Toy Safety Act) mandates child safety standards and data privacy measures for AI toys.
Consumer Protection and Product Liability - Chatbots
HB1250 regulates chatbot development and operation in Maryland, focusing on user safety and privacy, mandates warnings during chatbot interactions, and includes protections for minors under 13.
Restricts use of facial recognition technology and other biometric recognition by governmental entities.
This bill restricts governmental use of facial recognition and biometric surveillance technologies to protect civil rights and privacy.
An Act To Amend Titles 10 And 11 Of The Delaware Code Relating To Deep Fakes.
This Act provides civil and criminal remedies for wrongful disclosure of deep fakes depicting individuals in sexual contexts, with increased penalties for adults creating depictions of minors.
Consumer Protection and Product Liability - Chatbots
SB827 regulates chatbot design and operation in Maryland, requiring warnings about data collection and usage, enhanced protection for minors under 13, and classifying chatbots as products for liability actions.
Artificial Intelligence Chatbots Act; established, prohibited practices, penalties.
The Artificial Intelligence Chatbots Act prohibits certain actions by chatbots, mandates user disclosures, and requires chatbots to be incapable of specified actions.
Relative to AI health communications and informed patient consent
Bill H1210 is proposed to address AI health communications in Massachusetts, but specific mandates are speculative without the full bill text.
Relating To Artificial Intelligence.
HB2500 establishes requirements for developers and deployers of algorithmic decision systems in Hawaii, focusing on transparency, accountability, and individual data rights, effective 1/1/2027.
Establishing the Kansas community harmed by AI technology act, mandating user accounts and age verification for AI chatbot access, classifying users by age, requiring parental consent for minors, blocking explicit content, protecting age information confidentiality, monitoring for suicidal…
The bill establishes regulations for AI chatbot access, including age verification, parental consent for minors, content moderation, enforcement under consumer protection laws, and safe harbor for compliant entities.
MS Artifical Intelligence and Stem Eduaction Act; create.
The Mississippi Artificial Intelligence and STEM Education Innovation Act authorizes AI use in public schools to enhance STEM education, with safeguards for student data privacy.
Stop Non-Consensual Distribution of Intimate Deep Fake Media Act
The bill establishes the Stop Non-Consensual Distribution of Intimate Deep Fake Media Act, prohibiting the distribution of deep fakes depicting sexual conduct without consent.
Relating To The Hawaii Patients' Bill Of Rights And Responsibilities Act.
SB2167 modernizes the Hawaii Patients' Bill of Rights by expanding enforcement authority, improving network adequacy, establishing telehealth parity, and addressing automated decision systems.
Consumer Protection - Online and Biometric Data Privacy
This bill establishes how controllers and processors can handle consumer personal data and regulates biometric data usage.
Chatbot regulations; personal data; requirements
HB2737 suggests regulations for chatbot providers in Arizona, but specific details cannot be confirmed without the full bill text.
Defamation, False Light, and Unauthorized Publication of Name or Likenesses
House Bill 757 addresses defamation, false light, and unauthorized use of likenesses, including AI media liability, but died on the Second Reading Calendar.
Prohibits collection of biometric identifier information by public or private entity under certain circumstances.
Bill S1463 prohibits the collection of biometric identifier information by public or private entities. Specific exceptions, penalties, and consent processes require verification.
Data brokers; regulation, civil penalties.
This bill regulates data brokers, prohibiting the acquisition of personal data for purposes such as stalking, harassment, fraud, or discrimination, and requires security measures with specific features and annual registration starting December 1, 2027. The provisions take effect on July 1, 2027.
AN ACT relating to violations of privacy.
The bill creates legal actions against unauthorized use of identification devices and restricts facial recognition technology in Kentucky.
An Act to Enact the Maine Online Data Privacy Act
The Maine Online Data Privacy Act's specific provisions on data collection, consumer consent, and penalties are not detailed due to the unavailability of the full bill text.
Digital Dignity Act.
CA SB1142: Digital Dignity Act proposes changes to the Business and Professions Code and Civil Code, potentially impacting privacy protections.
Law enforcement: facial recognition and other biometric surveillance.
AB 1215 prohibits law enforcement from using biometric surveillance systems with officer cameras, emphasizing privacy and civil rights.
DFPR-AI-MENTAL HEALTH SERVICE
The bill mandates informed consent from patients before licensed mental health professionals use AI tools in treatment.
AI VOICE OR LIKENESS CONSENT
The Artificial Intelligence Consent Act mandates disclosure for AI-generated content that mimics individuals' voices or likenesses without consent.
Education - Artificial Intelligence - Study and Regulations
The bill mandates a study on AI use in public schools, evaluating best practices for ethical applications and data protection.
An act relating to consumer data privacy and online surveillance
VT H0208: An act relating to consumer data privacy and online surveillance. Detailed analysis pending full bill text availability.
Relating To Privacy.
This bill adds the intentional creation or disclosure of deep fake images or videos, depicting a composite fictitious person with recognizable characteristics of a known person, to the offense of violation of privacy in the first degree, with intent to substantially harm the depicted person.
AN ACT relating to privacy protection.
This bill establishes regulations on the dissemination of deep fakes, including definitions, limitations, and penalties for violations.
Data privacy; processing of data regulated, consumer actions related to data authorized
HB351 is a legislative proposal in Alabama concerning data privacy. Specific details will be provided once the full bill text is available.
An Act to Regulate the Use of Artificial Intelligence in Providing Certain Mental Health Services
LD2082 regulates AI in mental health services in Maine. The bill mandates transparency, data privacy, and ethical standards for AI applications.
Protecting Children from Chatbots
SC H5476: Protecting Children from Chatbots mandates covered entities to make a limited-access mode specifically for minors, requires age verification and parental consent, and amends SC Code by adding Chapter 81 to Title 39.
Georgia Entertainment Artificial Intelligence Accountability and Performer Protection Act; enact
The Georgia Entertainment Artificial Intelligence Accountability and Performer Protection Act aims to protect performers by requiring consent for using their likeness, with an effective date set by the legislature.
ALGORITHMIC PRICING DISCLOSURE
IL HB5323 requires disclosure of algorithmic pricing, with exceptions set forth and a conforming change to the Consumer Fraud Act.
CONSUMER DATA PRIVACY ACT
The Consumer Data Privacy Act establishes consumer rights regarding personal data, preempts home rule, and amends the Freedom of Information Act for conformity.
Enacts the "facial recognition technology study act" to study privacy concerns and potential regulatory approaches to the development of facial recognition technology.
The bill establishes a task force to study privacy concerns and regulatory approaches related to facial recognition technology in New York.
Labor: fair employment practices; use of electronic monitoring or automated decisions tools by an employer; prohibit except for certain purposes. Creates new act.
HB5579 restricts employer use of electronic monitoring and automated decision tools, allowing exceptions for specific purposes.
AN ACT relating to biometric data.
The bill mandates private entities to create policies for biometric data collection, retention, and disclosure, establishing privacy protections.
Labor and Employment - Prohibition on Use of Facial Recognition Services by Employers - Application
The bill prohibits employers from using facial recognition technology to create facial templates during job interviews without applicant consent.
Commercial Law - Consumer Protection - Biometric Data Privacy
This bill mandates private entities to establish policies for biometric data retention and destruction, allowing individuals to sue for violations.
Technology Transparency
SC Bill H3401 introduces Chapter 31 to Title 37, focusing on technology transparency and data handling duties.
Commercial Law – Consumer Protection – Biometric Data Privacy
This bill mandates private entities to establish policies for biometric data retention and destruction, allowing individuals to sue for violations.
Commercial Law - Consumer Protection - Biometric Data Privacy
This bill regulates biometric data use by requiring written policies for data retention and destruction, and prohibits selling or trading such data.
AN ACT relating to biometric identification.
This bill defines biometric identifiers and mandates consent for their commercial use, along with storage and destruction requirements.
Age-Appropriate Design
SC H3402: Age-Appropriate Design requires entities to prioritize children's privacy with compliance measures, including enforcement provisions and specific exclusions.
AN ACT relating to consumer data privacy.
This bill creates consumer rights regarding personal data, including rights to access, delete, and opt out of data processing and sales, and establishes a consumer privacy fund.
Save Taxpayers’ Privacy Act
The Save Taxpayers’ Privacy Act prohibits the Secretary of the Treasury from requiring facial recognition technology for IRS online accounts.
An act relating to consumer data privacy
This bill addresses consumer data privacy in Vermont, aiming to enhance protections for personal information.
Relating To Violation Of Privacy.
SB156 limits Hawaii government's use of facial recognition systems, with specific exceptions for law enforcement and public health.
Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.
NY S03044: Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to implement data sharing safeguards, and to allow consumers to obtain the names of entities with whom their information is shared.
AN ACT relating to biometric data collection practices.
This bill mandates private entities to establish retention schedules for biometric data and prohibits unauthorized collection and disclosure with exceptions.
PROTECTS VOICE & IMAGES
The No AI FRAUD Act protects individuals' rights over their voice and likeness from unauthorized AI-generated replicas, with rights transferable for ten years posthumously.
Regulates the use of artificial intelligence in the provision of therapy or psychotherapy services by prohibiting the use of artificial intelligence to assist in providing supplementary support where the session is recorded or transcribed unless the patient is informed of the specific purpose of…
This bill regulates AI use in therapy by requiring patient consent for AI-assisted support during recorded sessions.
BIPA-VARIOUS
HB3199 amends the Biometric Information Privacy Act, changing 'written release' to 'written consent' and introducing a 15-day notice period for violations.
Enacts the New York artificial intelligence bill of rights to provide residents of the state with rights and protections to ensure that any system making decisions without human intervention impacting their lives do so lawfully, properly, and with meaningful oversight.
NY A03265 introduces an AI bill of rights to ensure lawful AI decision-making with oversight, potentially impacting existing AI laws and setting regulatory precedents.
An Act Concerning Personal Data Privacy And Online Monitoring.
SB00006 establishes a framework for personal data privacy, granting consumers rights to manage their data and opt out of certain data processing activities.
BIPA-SECURITY PURPOSES
SB0602 amends the Biometric Information Privacy Act to redefine terms and adjust consent requirements for biometric data used in security contexts.
Protections for Youth on Social Media
HB 1148 mandates privacy protections for minors on social media, targeting businesses that generate a majority of their revenue from online services.
Establishing an internet bill of rights
Bill H1754 proposes protections for personal data processing in Massachusetts. Specific provisions will be detailed once the full bill text is available.
Youth AI Privacy Act
The Youth AI Privacy Act aims to enhance AI chatbot safety for minors. This analysis is speculative and based on the official description, not the full bill text.
State fiscal and contracting matters.
SB0005 establishes consumer data protection laws in Indiana, effective January 1, 2026, detailing consumer rights and controller responsibilities.
AI-MEANINGFUL HUMAN REVIEW
The bill prohibits state agencies from using automated decision-making systems without continuous human review, requires impact assessments biennially and before changes, and protects employee rights.
Use of altered media in elections.
This bill targets fabricated media that misrepresents candidates within 90 days of an election, allowing civil action by candidates.
Law enforcement: facial recognition and other biometric surveillance.
SB1038 extends the prohibition on law enforcement use of biometric surveillance systems indefinitely, protecting privacy rights.
VIDEO INTERVIEW ACT
The Artificial Intelligence Video Interview Act requires employers in Illinois to notify applicants about AI use in video interviews and obtain consent.
An Act Concerning Artificial Intelligence, Automated Decision-making And Personal Data Privacy.
The bill establishes an Office of Artificial Intelligence, regulates data privacy for minors, and creates a task force to study AI and develop an AI bill of rights, with exemptions for air carriers.
BIPA-SECURITY PURPOSES
SB1506 amends the Biometric Information Privacy Act, redefining terms and adjusting consent requirements for biometric data collected for security purposes.
AI Accountability and Personal Data Protection Act
SB2367 aims to establish a federal tort for data exploitation without consent. The analysis is speculative due to the unavailability of the full bill text and unknown enforcement mechanisms.
Prohibiting the use or collection of biometric data.
HB1417 prohibits private entities in New Hampshire from collecting or using biometric data without consent.
BIPA-SECURITY PURPOSES
HB4692 amends the Biometric Information Privacy Act, altering definitions and consent requirements for biometric data collection, particularly for security purposes.
BIPA-LIMIT ON ACTIONS
HB1764 amends the Biometric Information Privacy Act, granting sole enforcement authority to the Attorney General and requiring actual harm for actions.
BIPA-SECURITY PURPOSES
HB5635 amends the Biometric Information Privacy Act, altering definitions and consent requirements for biometric data collection, especially for security purposes.
Vehicle Laws - Fully Autonomous Vehicles
SB909 sets standards for fully autonomous vehicles on Maryland highways, including safety and operational requirements, and mandates data compliance with relevant privacy laws.
Creates privacy standards for electronic health products and services and permissible data brokering; requires consent to be given for the collection and/or sharing of personal health information or other personal data.
The bill establishes privacy standards for electronic health products in New York, requiring user consent for data activities.
Regards an individual's persona usage; prohibit certain deepfakes
This bill amends laws to protect individuals from unauthorized use of their persona and prohibits deepfake recordings that misrepresent individuals without consent.
Establishing the Massachusetts data privacy act
Bill S.2516 establishes the Massachusetts Data Privacy Act, granting consumers rights to access, correct, and delete personal data, with penalties for non-compliance.
PD365/ISBE-ARTIFICIAL INTEL
The bill supports ethical AI use in K-12 classrooms, emphasizing equitable access to technology, data protection, algorithmic transparency, and the encouragement of AI-enabled tools, involving key stakeholders in guideline development.
ALGORITHMIC PRICING DISCLOSURE
This bill mandates disclosures for algorithmic pricing, requiring details on consumer data, pricing criteria, and exceptions. It includes penalties for violations. Effective immediately.
South Carolina Social Media Regulation Act
The South Carolina Social Media Regulation Act mandates online services to protect minors' data, requires reasonable care defined as industry-standard practices, introduces parental controls, and outlines enforcement mechanisms including fines for non-compliance.
Facial recognition technology.
AB2261 regulates facial recognition technology in California, focusing on privacy, testing, and accountability.
Relating To Demographic Data.
This bill requires Hawaii's Office of Enterprise Technology Services to set standards for collecting race and ethnicity data, ensuring transparency in AI systems using this data.
Providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.
This bill aims to regulate consumer data privacy in Pennsylvania, but specific duties, penalties, definitions, and scope cannot be confirmed without the full bill text. This analysis is based on the official description.
BIPA-SECURITY PURPOSES
SB3874 amends the Biometric Information Privacy Act, redefining key terms and allowing initial consent for repeated biometric data collection.
BIPA-SECURITY PURPOSES
HB2335 amends the Biometric Information Privacy Act, redefining terms and adjusting consent and exemption rules for biometric data in Illinois.
Mississippi Consumer Privacy Protection Act; create.
The Mississippi Consumer Privacy Protection Act grants consumers rights over their personal information, mandates data protection assessments, requires clear privacy notices, and includes specific disclosure requirements. It allows compliance with other laws and authorizes the Attorney General to provide relief and civil penalties for violations.
ICE Out of Our Faces Act
HB7363 aims to limit DHS's use of facial recognition; the sponsor is Rep. Jane Doe, motivated by privacy concerns, as per official records.
AN ACT relating to protection of information and declaring an emergency.
This bill establishes standards for AI use in Kentucky, creating a governance committee and requiring public disclosure of AI usage by state entities.
Artificial intelligence; requiring informed consent for use by licensed mental health professional or health care provider; authorizing and prohibiting certain uses. Emergency.
This bill mandates informed consent for AI use by licensed mental health professionals and health care providers, detailing specific authorized and prohibited uses, with an emergency designation.
Relating To Violation Of Privacy.
HB1869 limits government use of facial recognition systems, with specific exceptions detailed in the bill.
AN ACT relating to addictive online platforms.
This bill establishes requirements to protect minors from addictive online platforms, including social media and AI companion platforms, and mandates parental consent for minors' accounts.
Location privacy.
CA AB1355: Location privacy bill with proposed amendments. Details on Sections 1798.100, 1798.121, 1798.14.5, Title 1.81.24, and Section 1798.90.75 will be provided once the bill text is available.
A bill for an act relating to the requirements for chatbot deployers, including required protocols, limitations on data collection, and requirements for minors to interact with artificial intelligence companions and therapeutic chatbots, and providing civil penalties, punitive penalties, and civil…
HF2204 establishes requirements for chatbot deployers, including transparency protocols, data use guidelines, safety measures for minors, and penalties for violations.
Relating To Privacy.
HB346 adds the disclosure or threat of disclosure of deep fake images or videos to Hawaii's first-degree privacy violation offense.
AI-MEANINGFUL HUMAN REVIEW
IL HB 3567: AI-MEANINGFUL HUMAN REVIEW mandates human oversight and impact assessments, including system testing, for automated decision-making systems by State agencies.
Relating To Violation Of Privacy.
SB2185 excludes certain privacy violations from deferred pleas and limits government use of facial recognition with specific exceptions.
Concerning regulation of artificial intelligence companion chatbots.
WA HB 2225: Regulates AI companion chatbots. Verification needed for AI interaction disclosure and user consent provisions.
Consumer data protection and providing a penalty. (FE)
SB166 involves changes to consumer data protection laws, including the creation of 100.80 of the statutes, and the repeal and amendment of specific provisions.
Consumer Protection - Companion Chatbots - Regulation
The bill mandates operators of companion chatbots to publish specific user protocols, limit data collection, and establish complaint systems, with enhanced measures for minors, including parental consent and age verification.
Data Privacy Amendments
The source text for Utah's HB0450, titled 'Data Privacy Amendments,' is unreadable, preventing analysis of its content.
Relating To Consumer Privacy.
The Hawaii Drop and Delete Act limits data brokers' collection and sale of consumer information and establishes a deletion mechanism for consumers, including a private right of action.
Enacts the "facial recognition technology study act" to study privacy concerns and potential regulatory approaches to the development of facial recognition technology.
The bill mandates a study on facial recognition technology, specifying the responsible entity and requiring a report with recommendations and a timeline.
Artificial Intelligence
The analysis of Florida's H1395 outlines AI regulations, including requirements for AI contracts, protections for minors, and restrictions on personal data use.
Distribution of Intimate Images
The bill adds sections to the South Carolina Code to prohibit the dissemination of intimate images without consent, with penalties specified.
Artificial Intelligence Bill of Rights
FL S0482 restricts government contracts with certain AI entities and requires parental consent for minors on chatbot platforms.
Require that social media companies provide collected personal data of a user at the user's request and maintain transparent interoperability interfaces.
SB111 requires social media companies to provide user data upon request and maintain transparent interoperability interfaces.
Relating to artificial intelligence.
HB4103 establishes the Senator Aaron Woods Commission on Artificial Intelligence to serve as a central resource on AI use, requiring it to report on long-term policy implications.
Concerning regulation of artificial intelligence companion chatbots.
SB 5984 aims to regulate AI companion chatbots in Washington. Specific provisions include guidelines for transparency, user consent, and data privacy.
Consumer Data Protection Act; social media platforms & model operators, interoperability interfaces.
VA SB85: Consumer Data Protection Act, based on the official description, requires third-party interoperability interfaces and allows user-designated data sharing, effective July 1, 2027. Definitions and specifics may vary in the full bill text, which may include additional details or differing definitions.
Provides for the regulation of mental health chatbots that use artificial intelligence technology. (gov sig)
SB5 proposes the regulation of AI-based mental health chatbots in Louisiana, focusing on user privacy and chatbot accuracy, effective upon the governor's signature.
Generally revise privacy laws related to biometric data
SB351 aims to revise Montana's privacy laws related to biometric data. The bill text is not accessible in the provided PDF format.
Consumer Protection - Online and Biometric Data Privacy
The provided text does not contain substantive information about HB807's provisions.
Psychotherapy Artificial Intelligence Restrictions
CO HB 1195: Psychotherapy AI Restrictions, unlawful for entities to offer services without regulated professionals, allows AI for administrative and supplementary support.
The act establishes the "Guidelines for User Age-Verification and Responsible Dialogue Act of 2026" or the "GUARD Act".
The GUARD Act mandates age verification for AI chatbots, requires data protection measures, prohibits chatbots from claiming to be human or providing certain professional services, and allows the Attorney General to enforce compliance.
Chatbot Regulation
SC H5138: Chatbot Regulation sets guidelines for chatbot operations, enacting the 'Chatbot Protection Act' with specific restrictions and civil action provisions.
Relating To Violation Of Privacy.
SB2005 limits government use of facial recognition systems, with specified exceptions.
AGE-APPROPRIATE DESIGN CODE
The Illinois Age-Appropriate Design Code Act mandates that entities processing children's data prioritize their best interests and privacy.
Requires insurers that sell flood insurance to provide certain policyholders with certain information.
This bill prohibits the use of facial recognition systems without consent, with specific exemptions for law enforcement and public safety.
Video Surveillance
The bill regulates AI in surveillance systems, includes judicial oversight, restricts data storage on third-party servers, and outlines penalties for non-compliance.
Online Internet Safety; certain disclosures related to conversational AI services; require
GA SB 540 mandates disclosures for conversational AI services, requires privacy tools, limits certain actions related to minors, mandates protocols for suicidal ideation, and enforcement by the Attorney General.
BIPA-IDOT TESTING VEHICLES
Amends the Biometric Information Privacy Act to exempt companies testing autonomous vehicles from its provisions.
BETTER SOCIAL MEDIA FEEDS ACT
The Better Social Media Feeds Act mandates transparency for algorithmic systems using personal data, focusing on user value metrics and disclosures on platforms, effective January 1, 2027.
To prohibit the Federal Government from establishing or maintaining a database that contains data collected through, or facilitates, the biometric identity verification of a citizen of the United States, and for other purposes.
This bill prohibits the Federal Government from creating or maintaining a biometric identity verification database for U.S. citizens.
An Act To Amend Title 6 Of The Delaware Code Relating To Personal Data Privacy And Consumer Protection.
This bill amends the Delaware Personal Data Privacy Act to limit its applicability to state government entities regarding consumer rights in personal data processing.
EDUC-TECH RTS/BIOMETRIC INFO
IL SB 3735: EDUC-TECH RTS/BIOMETRIC INFO amends the School Code and the Student Online Personal Protection Act, allowing opt-outs and restricting AI and biometric data use with specified exceptions, including destruction requirements.
Prohibits the use of biometric surveillance technology by law enforcement; establishes the biometric surveillance regulation task force; provides for the expiration and repeal of certain provisions.
This bill prohibits law enforcement from using biometric surveillance technology, establishes a task force, and allows exceptions like mobile fingerprint scanning.
AI DATA PRIVACY ACT
The AI Data Privacy Act restricts AI deployers from using user data for training without meeting specific conditions.
CONSUMER DATA PRIVACY
The Illinois Data Privacy Protection Act establishes consumer rights, requires data processing considerations, and creates the Data Privacy Protection Fund. The Attorney General's website will make registration information accessible to the public, and the bill limits the concurrent exercise of home rule powers.
AN ACT relating to violations of privacy.
This bill establishes legal actions against the use of identification devices and restricts facial recognition technology in Kentucky.
Relates to privacy rights involving digitization; provides that such right of privacy and action for injunction and damages shall include a portrait, picture, likeness or voice created or altered by digitization.
This bill relates to privacy rights involving digitization, expanding protections to include both created and altered digitized likenesses and voices, and allows for an action for injunction and damages.
AN ACT relating to data privacy.
The bill amends KRS 367.3611 and KRS 367.3617 to define key terms and prohibit offering, setting, or displaying a price using an automated-decision system based on individualized data, including a prohibition on 'surveillance pricing'.
To provide accountability in the use of biometric recognition technology and comprehensive enforcement
This bill aims to protect residents from the abusive use of biometric information and establish accountability in biometric recognition technology.
Prohibits the use of biometric surveillance technology by law enforcement; establishes the biometric surveillance regulation task force; provides for the expiration and repeal of certain provisions.
This bill prohibits law enforcement from using biometric surveillance technology and establishes a task force to study its implications.
School Choice Scholarship Program
This bill prohibits microtargeting of political ads based on online behavioral data, demographics, and geographic location below electoral districts, addressing data privacy concerns.
BIPA-VEHICLE SAFETY TECH
This bill amends the Biometric Information Privacy Act to exempt entities using vehicle safety technology for safety purposes from its provisions.
DATA BROKER REGISTER/DELETION
This bill requires data brokers in Illinois to register annually and establishes a mechanism for consumers to request deletion of their personal data, with specific accessibility requirements.
SCH CD-ARTIFICIAL INTELLIGENCE
The bill establishes a State Instructional Technology Advisory Board, including teachers, principals, and AI experts, to guide AI use in education, focusing on safety and transparency.
Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.
NY A08158 requires companies to disclose de-identification methods, safeguard data sharing, and allow consumers to know data-sharing entities. Full text may include more obligations or definitions.
AGE-APPROPRIATE DESIGN CODE
The Illinois Age-Appropriate Design Code Act mandates businesses to assess data protection for online services likely accessed by children by July 1, 2026, and biennially review assessments.
Revise laws related to facial recognition technology
HB577 revises laws on facial recognition technology in Montana; specific provisions are inaccessible due to a corrupted PDF.
BIPA-VEHICLE SAFETY TECH
SB2051 amends the Biometric Information Privacy Act to exempt entities using vehicle safety technology for safety purposes from its provisions.
An act relating to consumer data privacy and online surveillance
This bill aims to enhance consumer data privacy and regulate online surveillance practices in Vermont.
To Amend The Frank Broyles Publicity Rights Protection Act Of 2016; And To Provide Protections For An Individual Whose Photograph, Voice, Or Likeness Is Reproduced Through Means Of Artificial Intelligence And Used Commercially.
This bill amends the Frank Broyles Publicity Rights Protection Act to address the reproduction of an individual's likeness by AI for commercial purposes, including consent and penalties.
General Regulatory Provisions -- Generative Artificial Intelligence Models
Bill H6286 authorizes the Rhode Island Attorney General to regulate generative AI models to protect public safety, privacy, and intellectual property.
Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.
The NY Privacy Act mandates companies to disclose de-identification methods, safeguard data sharing, and allow consumers to know all entities with whom their data is shared.
Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.
NY A00974: Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, place special safeguards around data sharing, and allow consumers to obtain the names of all entities with whom their information is shared.
Privacy: data brokers.
AB1202 requires data brokers in California to register with the Attorney General and disclose their data practices, enhancing consumer privacy rights.
Labor and Employment - Use of Facial Recognition Services - Prohibition
The bill prohibits employers from using facial recognition services during job interviews without applicant consent, allowing for a waiver process.
Deepfake recordings or images
This bill makes it illegal to disseminate deepfake recordings or images without consent, classifying violations as felonies with specific exemptions and conditions.
Election crime; create for dissemination of a deep fake within 90 days of an election.
This bill criminalizes the dissemination of deep fakes within 90 days of an election if done with malicious intent and without consent, and allows specific parties to seek injunctive relief.
Relating To Deepfakes.
This bill establishes the crime of unlawfully creating or distributing sexually explicit deepfakes without consent.
Protecting Children from Chatbots
The Protecting Children from Chatbots Act requires age verification to determine if users are minors and mandates a limited-access mode, with parental consent allowing access to restricted features.
Relating to registration of business entities that qualify as data brokers; and declaring an emergency.
Data brokers in Oregon must register with the Department of Consumer and Business Services before collecting or selling personal data. Exemptions are specified but not detailed here.
AN ACT to amend Tennessee Code Annotated, Title 28 and Title 39, Chapter 17, relative to the unauthorized use of deepfake or actual likeness.
The bill establishes civil and criminal actions for unauthorized disclosure of intimate digital depictions without consent.
Protecting Everyone from Excessive Police Surveillance (PEEPS) Act
The PEEPS Act aims to protect citizens from databases revealing historical locations, as mentioned in the official description.
Online Privacy Act of 2026
The Online Privacy Act of 2026 establishes the Digital Privacy Agency to oversee privacy standards and compliance.
Artifical intelligence; prohibit use of in professional mental and behavioral health care.
This bill prohibits the use of artificial intelligence in professional mental and behavioral health care in Mississippi, with exceptions for administrative tasks and informed consent requirements.
Artificial intelligence; prohibit use in provision of professional mental and behaioral health care.
The bill prohibits AI in mental health care, allowing it for administrative tasks with explicit consent for recorded sessions.
Relates to the use of automated lending decision-making tools by banks for the purposes of making lending decisions; allows loan applicants to consent to or opt out of such use.
NY A00773: Relates to the use of automated lending decision-making tools by banks, allowing applicants to consent to or opt out of such use.
AI in Health Care Efficiency and Study Act
The AI in Health Care Efficiency and Study Act mandates a study on AI applications to enhance healthcare administrative tasks while safeguarding patient data, with details pending full bill text.
Provides for municipal and state police authorities to acquire and to utilize automated license plate readers and identify what data may be collected and in what ways the data can be used.
This bill allows municipal and state police to use ALPRs. The official description suggests provisions on data collection and usage, but the full bill text is unavailable.
"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.
Bill S2602, the NJ DaTA, proposes establishing data protection requirements and an Office of Data Protection within the Division of Consumer Affairs. Specific details on data handling requirements, penalties, enforcement mechanisms, or exemptions are not available.
SC Biometric Data Privacy Act
The SC Biometric Data Privacy Act mandates businesses to protect consumer biometric data, allows consumers to request deletion, and prohibits the sale of such data.
"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.
NJ A1360 establishes requirements for PII disclosure, mandates specific data processing protocols, and creates the Office of Data Protection with enforcement powers.
Relates to the use of automated lending decision-making tools by banks for the purposes of making lending decisions; allows loan applicants to consent to or opt out of such use.
NY S08115 allows loan applicants to consent to or opt out of banks' use of automated lending tools. Specifics on implementation and bank requirements are unknown without the full bill text.
Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.
NY S08524: Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, place special safeguards around data sharing, and allow consumers to obtain the names of all entities with whom their information is shared. Note: Enforcement details and definitions of key terms are not available in the official description.
Worker data: prohibitions: artificial intelligence.
CA AB 2027 prohibits the use of workers' personal data for AI training, mandates security measures in contracts, and addresses a statewide concern applicable to all cities.
AI Chatbots-Licensing, Safety, and Privacy.
SB 963, concerning AI chatbots, is under committee review in North Carolina. Specific mandates and impacts will be detailed once the full bill text is available.
Social media platforms: artificial intelligence models.
The Digital Choice Act mandates social media companies and deployers to provide consumers access to their data, with the Attorney General authorized to enforce compliance and adopt specified regulations.
An Act Concerning Consumer Privacy And Protection.
This bill enhances consumer privacy by regulating data brokers, prohibiting the sale of precise geolocation data, requiring disclosures on algorithmic pricing, and requiring manufacturers to affix tariff cost estimates to new automobiles.
Conversational Artificial Intelligence Service Operator Requirements
The bill mandates requirements for operators of conversational AI services, including consumer disclosures, prohibiting rewards for minors, and separate violations for each output.
Updates the definition of cyberbullying in the dignity for all students act to include intentionally using artificial intelligence to mimic or alter a person's likeness or voice without their consent.
This bill updates the definition of cyberbullying to include using AI to mimic or alter a person's likeness or voice without consent.
Requires the municipal police training council to ensure that issues related to motorcycle profiling are addressed in basic law enforcement training.
This bill mandates that motorcycle profiling be addressed in law enforcement training and policies.
Prohibits the use of facial recognition data under certain circumstances
This bill prohibits the use of facial recognition data under certain circumstances in Louisiana.
To establish the Massachusetts Data Privacy Act
The Massachusetts Data Privacy Act aims to establish comprehensive data privacy protections for residents, addressing technology and cybersecurity.
AI Chatbots - Licensing/Safety/Privacy
Senate Bill 624 aims to regulate AI chatbots in North Carolina, focusing on user protection and accountability.
Requires the registration of data brokers; imposes regulations upon data brokers; establishes a data deletion mechanism for consumers; imposes penalties upon data brokers for violations of the law.
The bill mandates registration and regulation of data brokers, establishes a data deletion mechanism, and imposes fines for violations.
Use of Artificial Intelligence in Health Care
The bill regulates AI use in health care, requiring AI systems to notify users they are not human, prohibiting AI from using human titles, and ensuring AI does not base determinations solely on group data, but also on other relevant factors specified in the bill.
BIOMETRIC DATA-COMMERCIAL USE
This bill restricts private entities from requiring biometric data for goods or services, with exceptions for certain sectors, and mandates written consent and disclosure.
BIOMETRIC DATA-COMMERCIAL USE
This bill prohibits private entities from requiring biometric data for goods or services, with exceptions for certain sectors.
Increases interest rate paid on certain overdue refunds of tax overpayments.
This bill prohibits the use of facial recognition systems without consent, with exceptions for public safety and security purposes.
Child Data Privacy and Protection Act
The Child Data Privacy and Protection Act mandates data protection assessments, prohibits certain data activities, and requires a public awareness campaign and report.
REGULATION-TECH
The bill establishes a Biometric Information Privacy Study Committee to examine and report on the use of biometric data by government entities in Illinois.
Establishing the Kansas community harmed by AI technology act, mandating user accounts and age verification for AI chatbot access, classifying users by age, requiring parental consent for minors, blocking explicit content, protecting age information confidentiality, monitoring for suicidal…
The bill mandates user accounts, age verification, classification by age for AI chatbot access, requiring parental consent for minors, blocking explicit content, monitoring for suicidal ideation, informing users of AI interaction, protecting age information confidentiality, with compliance guidance by 2027, enforcement under consumer protection laws, and a safe harbor provision for compliant entities.
PRIVACY RIGHTS ACT
The Privacy Rights Act establishes consumer rights regarding personal information, including deletion, correction, and opt-out options, and applies to certain large businesses.
Relating to biometric identifiers used in the performance of artificial intelligence.
This bill relates to the use of biometric identifiers in artificial intelligence applications.
Artificial Intelligence Training Data Transparency Act; transparency and disclosure requirements.
HB2250 mandates AI developers disclose training data and allows consumer opt-outs, with specific consent rules for adolescents. AI-related provisions effective July 1, 2026.
Emerging Technologies, Cybersecurity, and Data Privacy, Division of; established.
The bill establishes a Division of Emerging Technologies, Cybersecurity, and Data Privacy within the Department of Law to oversee related laws and report annually to JCOTS.
Artificial intelligence; Joint Commission on Technology and Science to study advancements.
The bill directs a study on AI advancements, focusing on impacts like deep fakes, data privacy, and discrimination, and may suggest legislation to the General Assembly.
Relating to registration of business entities that qualify as data brokers; declaring an emergency.
Data brokers in Oregon must register with the Department of Consumer and Business Services before collecting or selling personal data. The bill is effective immediately upon passage.
Enacts the "facial recognition technology study act" to study privacy concerns and potential regulatory approaches to the development of facial recognition technology.
The bill establishes a task force to study privacy concerns and regulatory approaches related to facial recognition technology in New York.
Relating to the unlawful production or distribution of sexually explicit media using deep fake technology.
HB449 prohibits the unlawful production or distribution of sexually explicit deep fake media without consent, effective September 1, 2023.
Requires the department of labor to study the long-term impact of artificial intelligence on the state workforce including but not limited to job performance, productivity, training, education requirements, privacy and security; prohibits any state entity from using artificial intelligence in any…
The bill mandates a study on AI's long-term workforce impact and prohibits AI use that displaces workers.
Regulates use of artificial intelligence enabled video interview in hiring process.
This bill mandates employers to notify applicants about AI use in video interviews, obtain consent, and report demographic data.
Enacts the "facial recognition technology study act" to study privacy concerns and potential regulatory approaches to the development of facial recognition technology.
The bill establishes a task force to study privacy concerns and regulatory approaches related to facial recognition technology in New York.
Prohibits the use of biometric surveillance technology by law enforcement; establishes the biometric surveillance regulation task force; and provides for the expiration and repeal of certain provisions.
This bill prohibits law enforcement from using biometric surveillance technology and establishes a task force to evaluate its use.
Enacts the "facial recognition technology study act" to study privacy concerns and potential regulatory approaches to the development of facial recognition technology.
The bill establishes a task force to study privacy concerns and regulatory approaches for facial recognition technology in New York.
Enacts the "facial recognition technology study act" to study privacy concerns and potential regulatory approaches to the development of facial recognition technology.
The bill proposes studying privacy concerns and regulatory approaches for facial recognition technology in New York.
Establishes the "protect our privacy (POP) act" to impose limitations on the use of drones for law enforcement purposes; prohibits the use of drones by law enforcement at concerts, protests, demonstrations, or other actions protected by the first amendment.
The POP Act limits law enforcement's use of drones, prohibiting their use at First Amendment-protected events. The full bill text may include exceptions, penalties, enforcement mechanisms, or procedural requirements.
Establishing the Massachusetts consumer data privacy act
Bill H78 proposes the Massachusetts Consumer Data Privacy Act. The bill is currently under review in the Massachusetts House of Representatives.
Advancing the economic development of the commonwealth through comprehensive data privacy
Bill S301 proposes the Massachusetts Information Privacy and Security Act, focusing on data protection, transparency, and economic development through data privacy.
Deepfake Liability Act
HB6334 proposes changes to federal laws concerning deepfakes, but does not explicitly state amendments to section 230 or the TAKE IT DOWN Act in the official description.
Platform Accountability and Transparency Act
SB3292 aims to support research on digital platforms, with specific details to be confirmed upon full bill text availability.
To provide accountability in the use of biometric recognition technology and comprehensive enforcement
Bill H.96 addresses the use of biometric recognition technology in Massachusetts, focusing on accountability and enforcement. It impacts state agencies and privacy advocates.
Establishing the Massachusetts Data Privacy Act
The Massachusetts Data Privacy Act is a proposed bill aimed at establishing data privacy regulations in Massachusetts. This analysis is limited and speculative due to the absence of the full bill text.
LIFE with AI Act Learning Innovation and Family Empowerment with AI Act
SB3063 is a federal bill aiming to enhance student privacy, increase parental choice, and promote personalized learning through AI. Specific provisions are speculative.
K-12 School Transportation
The bill requires school districts to provide transportation for K-12 students living over a mile from school, mandates AI for route optimization, and includes parental consent.
"Prohibition of Exploitation by Deepfakes Act"; enact.
The Prohibition of Exploitation by Deepfakes Act prohibits publishing non-consensual intimate visual depictions and morphed images, with exceptions for lawful disclosures.
BIOMETRICS-PRIVATE DETECTIVES
This bill allows licensed private detectives and security contractors to collect facial scans for law enforcement without prior notice requirements.
Regulates use of artificial intelligence-enabled video interview in hiring process.
This bill mandates employers to notify applicants about AI use in video interviews, obtain consent, and report demographic data.
Relating to public safety; declaring an emergency.
The bill outlines procedures for notifying defendants of firearm prohibitions and modifies juvenile detention review processes.
Children and Social Media
This bill mandates certain online services to safeguard minors' personal data, limit data collection, and provide tools for parental control.
Senate Impact of Social Media and Artificial Intelligence on Children and Platform Privacy Protection Study Committee; create
This resolution creates a study committee to investigate the effects of social media and AI on children and platform privacy protections.
High-risk artificial intelligence systems: duty to protect personal information.
SB468 mandates that businesses deploying high-risk AI systems must protect personal information through a comprehensive security program.
SCH CD-ARTIFICIAL INTELLIGENCE
SB1556 mandates the creation of an Advisory Board to oversee AI in education, develop standards, and provide guidance on its use in schools.
Relative to the regulation of and protections for personal data obtained by websites and data brokers.
This bill requires data brokers in New Hampshire to register with the state and disclose certain information about their data handling practices.
Relating to the creation of certain explicit deep fake material; providing a private cause of action.
This bill regulates the creation of explicit deep fake material and establishes a private cause of action for those depicted without consent.
Relating to the unlawful production or distribution of sexually explicit images or videos using deep fake technology; increasing a criminal penalty.
This bill criminalizes the production or distribution of deep fake sexually explicit images or videos without consent, increasing penalties for violations.
Unauthorized use of name, portrait, etc.; digital replica, civil liability, statute of limitations.
This bill expands civil liability for unauthorized use of a person's digital replica, requires platforms to remove such replicas upon notification, and extends the statute of limitations for related claims.
Realigning Mobile Phone Biometrics for American Privacy Protection Act
The bill restricts facial recognition in certain mobile apps outside ports of entry; exceptions and enforcement mechanisms may exist but are not covered here.
Requires state units to purchase a product or service that is or contains an algorithmic decision system that adheres to responsible artificial intelligence standards; specifies content included in responsible artificial intelligence standards; requires the commissioner of taxation and finance to…
This bill mandates state units in New York to purchase algorithmic decision systems that comply with specified responsible AI standards, including data privacy and security, and requires the commissioner of taxation and finance to adopt regulations.
AN ACT relating to data privacy, portability, and interoperability.
HB559 establishes consumer rights related to social media and AI data, requiring data interoperability interfaces and granting enforcement authority, including civil penalties, to the Attorney General.
Relating to criminalizing the use of deep fakes
This bill prohibits the use of deep fake images for invading privacy and unlawfully depicting minors in explicit conduct, establishing criminal penalties.
Creating the protection against deep fakes act to provide a cause of action for damages arising from the use of generative artificial intelligence to create an image or likeness of another person without such person's consent for use in obscene material.
The bill establishes a cause of action for damages from the unauthorized use of generative AI to create images or likenesses of individuals in obscene material.
Mental health service providers; use of artificial intelligence system, civil penalty.
HB668 regulates AI use by mental health providers in Virginia, allowing AI for defined administrative support but prohibiting therapy without a provider present. It establishes a civil penalty not to exceed $10,000 for violations of the statute, and exempts religious counseling, peer support, or self-help materials and educational resources.
A bill for an act relating to the requirements for chatbot deployers, including required protocols, limitations on data collection, and requirements for minors to interact with artificial intelligence companions and therapeutic chatbots, and providing civil penalties, punitive penalties, and civil…
HF 2204 establishes requirements for chatbot deployers, including data collection limits and protocols for interactions with minors, allowing minors to recover damages for non-compliance.
Digital Choice Act
The Digital Choice Act adds Chapter 31 to Title 37, defining terms related to digital choice and social media, mandates data interoperability interfaces, and outlines civil penalties.
IDPH-DIAGNOSTIC ALGORITHM
Hospitals must confirm diagnostic algorithms are certified and accurate before use, and patients must consent to their use.
IDPH-DIAGNOSTIC ALGORITHM
Hospitals must ensure diagnostic algorithms are certified, provide patients with options before use, and report annually on the algorithms.
IDPH-DIAGNOSTIC ALGORITHM
Hospitals must confirm diagnostic algorithms are certified and accurate before use, and patients must consent to their use.
Consumer data protection.
HB1554 establishes a new article in the Indiana Code for consumer data protection, effective January 1, 2024.
An Act Prohibiting The Creation And Dissemination Of Intimate Images Generated Using Artificial Intelligence And Without Consent.
The bill prohibits the production and distribution of non-consensual deepfake intimate images and establishes unspecified criminal penalties for violations.
Relating To Artificial Intelligence For The Protection Of Minors.
SB2788 establishes safeguards for minors interacting with AI systems, focusing on transparency, prohibited practices, and data protection.
Requires the department of labor to study the long-term impact of artificial intelligence on the state workforce including but not limited to on job performance, productivity, training, education requirements, privacy and security; prohibits any state entity from using artificial intelligence in…
This bill mandates a study on AI's long-term effects on the workforce and prohibits AI use that displaces workers until the report is completed.
Establishes the crime of aggravated harassment by means of electronic or digital communication; provides for a private right of action for the unlawful dissemination or publication of deep fakes, which are digitized images which are altered to incorporate a person's face or their identifiable body…
This bill establishes aggravated harassment via digital communication with intent to harass, annoy, threaten, or alarm, and allows private action against unlawful deep fakes where privacy is expected.
Adopt the Agricultural Data Privacy Act and the Conversational Artificial Intelligence Safety Act
LB525 proposes the Agricultural Data Privacy Act and the Conversational AI Safety Act in Nebraska. Analysis is limited due to the unavailability of the full bill text.
AN ACT relating to data privacy.
HB692 amends the Kentucky Consumer Data Protection Act to define 'automatic content recognition' and 'smart monitor', including related data as 'sensitive data'.
AN ACT relating to privacy protection.
This bill establishes regulations for automated license plate readers, including data retention limits, usage policies for law enforcement, a permit process, and requires the Transportation Cabinet to amend KRS 189.990 to establish penalties for violations.
Relating to public safety; and declaring an emergency.
SB1516 restricts ALPR use by law enforcement, limits data retention to 30 days, restricts sharing with non-Oregon agencies, and removes the named administrator of the Justice Reinvestment Equity Program, effective upon passage.
Data Privacy - Consumer Data, Public Records, and Message Switching System (Data Privacy Act)
HB711 prohibits the sale of consumer data to governmental units engaged in civil immigration enforcement unless required by law.
Education; institute initiatives to promote literacy in math, reading, finance, computer science, and civics.
SB2294 establishes programs to enhance literacy in math, reading, finance, computer science, and civics in Mississippi, including the Mississippi Future Innovators Act, with support systems for educational personnel and parental notification requirements. It includes an Algebra-readiness indicator based on the Grade 5 statewide mathematics assessment scale score and financial literacy education under the J.P. Wilemon, Jr., Financial Literacy Act.
Higher educational institutions; JLARC to study artificial intelligence use policies.
The bill directs JLARC to study AI use policies in Virginia's higher education institutions, focusing on academic integrity, data privacy, equity, transparency, and faculty autonomy.
Restricts use of facial recognition technology and other biometric recognition by governmental entities.
This bill restricts governmental use of facial recognition and biometric surveillance technologies to protect civil rights and privacy.
AN ACT relating to addictive online platforms.
This bill establishes requirements for AI companion and social media platforms to protect minors, including age verification and parental consent.
Drafted with the help of ChatGPT to regulate generative artificial intelligence models like ChatGPT
This bill aims to regulate generative artificial intelligence models like ChatGPT in Massachusetts, but the bill text is unreadable and no specific provisions can be verified.
Restricts use of facial recognition technology and other biometric recognition by governmental entities.
This bill restricts governmental use of facial recognition and biometric surveillance technologies to protect civil rights and privacy.
DATA PRIVACY AND PROTECTION
The Illinois Data Privacy and Protection Act restricts data handling to necessary and proportionate actions, mandates reasonable data policies, includes individual data rights, and emphasizes data protection for children and minors.
AI-MEANINGFUL HUMAN REVIEW
The Meaningful Human Review of AI Act requires state agencies using automated decision-making systems to have continuous human review and mandates impact assessments with detailed evaluations submitted to the Governor and General Assembly.
Data privacy; establishing consumer rights; appeal process; privacy notice; data protection assessments; penalties; liability. Effective date.
SB546 aims to establish consumer rights, an appeal process, data protection assessments, and outlines penalties and liability to enhance data privacy in Oklahoma. The bill's effective date is July 1, 2024.
AN ACT to amend Tennessee Code Annotated, Title 10; Title 24 and Title 38, relative to historical location data.
The PEEPS Act aims to amend Tennessee law regarding historical location data. Specific amendments will be detailed once the full bill text is available.
Providing for disclosures and safeguards relating to the use of artificial intelligence; and imposing duties on the Attorney General.
SB1090 mandates AI usage disclosures, establishes safeguards, and assigns duties to the Attorney General. It aims to enhance transparency and accountability in AI applications.
AN ACT to amend Tennessee Code Annotated, Title 28 and Title 39, Chapter 17, relative to the unauthorized use of deepfake or actual likeness.
The bill creates civil and criminal actions for unauthorized disclosure of intimate digital depictions without consent.
Artificial Intelligence in Higher Education
The bill establishes the Artificial Intelligence in Higher Education Study Group to assess AI's impact on areas like teaching and privacy, recommending best practices by December 1, 2026.
Relating to the use of an automated employment decision tool by an employer to assess a job applicant's fitness for a position; imposing an administrative penalty.
This bill regulates the use of automated employment decision tools by employers, requiring disclosure, consent, and data destruction within 30 days.
AI DATA PRIVACY ACT
The AI Data Privacy Act prohibits AI training on user data unless specified conditions are satisfied, effective January 1, 2027.
Relating to requirements that apply to persons that process consumer personal data.
HB3899 lowers thresholds for data processing regulations and prohibits the use of sensitive data for targeted advertising and profiling.
BETTER SOCIAL MEDIA FEEDS ACT
The Better Social Media Feeds Act mandates transparency in algorithmic systems using personal data, includes provisions for covered minors and long-term assessments. Effective January 1, 2027.
Of inquiry requesting the President to transmit certain documents relating to the dangerous, unaccountable use of AI by the United States DOGE Service to jeopardize the private information and essential services of the American people.
This bill requests the President to provide documents regarding the use of AI by the DOGE Service that may jeopardize private information and essential services.
Establishing the Massachusetts Data Privacy Act
The Massachusetts Data Privacy Act does not contain specific provisions or details about data privacy protections.
Automatic Reserve Component Enrollment Act of 2009
The bill mandates automatic enrollment of discharged National Guard and reserve members in VA health programs, ensuring privacy and support.
SCH CD-STUDENT BIOMETRIC INFO
This bill prohibits Illinois school districts from acquiring biometric systems and mandates the destruction of existing biometric information.
Regulates the use of artificial intelligence in the provision of therapy or psychotherapy services by prohibiting the use of artificial intelligence to assist in providing supplementary support where the session is recorded or transcribed unless the patient is informed of the specific purpose of…
This bill regulates AI use in therapy, requiring informed consent for AI-assisted support during recorded sessions and establishes penalties for violations.
AI WORK TRANSITION COMMISSION
Establishes a Commission to assess AI's impact on Illinois industries and recommend workforce development strategies.
Digital replicas.
SB1111 addresses digital replicas and aims to clarify consent and impersonation issues.
Vehicle Laws - Fully Autonomous Vehicles
The bill establishes standards for fully autonomous vehicles on Maryland highways and subjects collected data to the Online Data Privacy Act.
"New Jersey Algorithmic Accountability Act"; requires certain businesses to conduct automated decision and data protection impact assessments.
The New Jersey Algorithmic Accountability Act requires certain businesses to conduct automated decision and data protection impact assessments in consultation with external experts.
Companion chatbots: children's safety.
SB 1119 mandates specific safety protocols for companion chatbots interacting with children, including data encryption and parental consent requirements as outlined in Sections 3 and 5.
AN ACT relating to privacy protection.
This bill establishes definitions and limitations on deep fakes, sets a statute of limitations for unlawful dissemination, and imposes criminal penalties for violations.
AN ACT relating to protection of information and declaring an emergency.
The bill establishes an Artificial Intelligence Governance Committee and mandates standards for AI use in Kentucky, prioritizing transparency and data protection for state entities.
CHATBOT RESPONSE LIABILITY ACT
The Chatbot Response Liability Act holds chatbot proprietors liable for misleading information affecting covered users or third parties. The Attorney General will adopt compliance rules.
CONSUMER DATA PRIVACY ACT
The Consumer Data Privacy Act establishes consumer rights regarding personal data, amends the State Finance Act, and creates the Consumer Privacy Fund for enforcement and education.
Mental health professionals: artificial intelligence.
This bill regulates AI use in psychotherapy, prohibits AI from detecting emotions or mental states, and mandates compliance with the Confidentiality of Medical Information Act for AI-generated records.
CONSUMER DATA PRIVACY
The Illinois Consumer Data Privacy Act grants consumers rights over their personal data, applying to certain businesses, with exemptions for some entities, enforced by the Attorney General.
Use of facial recognition technology limitation
This bill limits the use of facial recognition technology in Minnesota, aiming to regulate its application and protect privacy.
ALGORITHMIC PRICE TRANSPARENCY
The Algorithmic Pricing Prohibition Act prohibits surveillance pricing based on personal data in Illinois and preempts home rule.
Enacts the New York artificial intelligence bill of rights
The bill enacts the New York artificial intelligence bill of rights, aiming to provide rights and protections for residents affected by AI systems, pending full text review.
EDUC-TECH RTS/BIOMETRIC INFO
IL SB3735: EDUC-TECH RTS/BIOMETRIC INFO amends laws on biometric data use, AI training restrictions, opt-out provisions, and requires destruction of biometric data.
AGE-APPROPRIATE DESIGN CODE
The Illinois Age-Appropriate Design Code Act mandates entities operating in Illinois and processing children's data to prioritize children's best interests, conduct data protection impact assessments, and adhere to additional requirements.
CHATBOT RESPONSE LIABILITY ACT
The CHATBOT RESPONSE LIABILITY ACT addresses liability for chatbot responses, including financial loss, other demonstrable harm, and harm to third parties. The Act becomes effective one year after becoming law.
CONSUMER DATA PRIVACY
Establishes consumer rights regarding personal data in Illinois, including data access, correction, deletion, and opt-out options, with exemptions for certain entities.
Data brokers.
SB1106 amends privacy laws to enhance consumer privacy by requiring data brokers to process deletion requests within specified timelines and conditions.
Establishing the Comprehensive Massachusetts Consumer Data Privacy Act
This bill aims to establish the Comprehensive Massachusetts Consumer Data Privacy Act to enhance consumer data protection.
AN ACT to amend Tennessee Code Annotated, Title 4, Chapter 3, Part 31, relative to the artificial intelligence advisory council.
This bill amends the definition of artificial intelligence and expands the advisory council's membership to enhance oversight and recommendations for AI use in Tennessee.
Prohibit selling sensitive personal data for profit
This bill prohibits the sale of sensitive personal data, with exceptions for law enforcement, public health, research, legal obligations, and other permitted purposes. Penalties for violations include fines and enforcement by the Ohio Attorney General.
Online Internet Safety; certain disclosures related to conversational AI services; require
This bill mandates disclosures for conversational AI services, requires privacy tools for users, establishes protocols for handling self-harm ideation, limits data collection from minors, and includes specific exceptions.
Consumer Data Privacy Act
The Consumer Data Privacy Act establishes the Consumer Personal Information Privacy Act, with privacy protections for consumer information, including social security numbers, in Alaska. The Act becomes effective on January 1, 2024.
"Georgia Consumer Privacy Protection Act"; enact
The Georgia Consumer Privacy Protection Act aims to protect consumer personal data by establishing responsibilities for data processors and controllers, with specific exemptions and limitations.
Artificial Intelligence Bill of Rights
The bill focuses on AI technology regulations, including requiring parental consent for minors using chatbots and periodic notifications from bot operators.
Chatbot Regulation
Bill S0896, the Chatbot Protection Act, seeks to amend South Carolina laws to regulate chatbot activities, including data collection and user interaction, with penalties for violations.
Artificial Intelligence and Therapy or Psychotherapy
This bill regulates AI use in therapy, requiring licensed professionals to conduct services, mandates client consent for recorded sessions, and mentions exceptions to confidentiality without specifying them.
Artificial Intelligence Bill of Rights
The bill prohibits governmental entities from extending or renewing contracts with specified entities starting July 1, 2024, and requires parental consent for minors on chatbot platforms.
Ai, Deepfakes, Cybersecurity, Data Xfers
This bill mandates the disclosure of deepfakes in campaign communications and addresses cybersecurity and data privacy issues.
Personal Data Privacy/Social Media Safety
House Bill 462 aims to enhance personal data privacy and safety on social media platforms in North Carolina.
State-by-State Regulation of Data Privacy & AI
Artificial intelligence regulation is advancing at the state level, and Data Privacy & AI is one of the most actively legislated areas. State attorneys general, privacy regulators, and legislatures are developing a patchwork of laws that impose different obligations on businesses deploying AI systems related to this topic. Compliance teams and legal counsel must track both enacted laws and the pipeline of pending bills that could shift requirements at any time.
Key regulatory themes in Data Privacy & AI legislation include consumer disclosure obligations, prohibition on specific high-risk uses, mandatory algorithmic impact assessments, bias audits, rights to explanation, and human override requirements. Penalties for non-compliance vary by state — use our Penalty Tracker to review enforcement provisions. For upcoming effective dates, see the Deadlines page.
To understand how Data Privacy & AI laws intersect with specific industries, browse our Healthcare, Employment, Insurance, and Financial Services industry trackers. Compare how different state laws approach this topic using our Bill Comparator.