CCIA Surprised No State Passed Comprehensive Privacy Law Yet in 2025
State privacy trends this year include increased transparency requirements, enhanced protections for children and tinkering with existing privacy laws to clarify obligations and close loopholes, the Computer & Communications Industry Association said Thursday. CCIA released a report and updated maps on state privacy legislation in 2025.
Sign up for a free preview to unlock the rest of this article
Privacy Daily provides accurate coverage of newsworthy developments in data protection legislation, regulation, litigation, and enforcement for privacy professionals responsible for ensuring effective organizational data privacy compliance.
CCIA cautioned in a news release that “diverging state approaches may create confusion for users and additional compliance burdens for businesses operating across multiple jurisdictions.”
“Surprisingly, no new comprehensive privacy laws have passed in 2025 as of October 1, 2025,” the report said. “However, states have continued proposing new privacy legislation and measures in Massachusetts, New York, and Pennsylvania have the potential to pass in 2025 or the 2026 session.”
The Massachusetts legislature weighed several consumer privacy proposals in 2025 but none advanced to the floor, CCIA noted in the press release. The House advanced a comprehensive privacy bill with a limited private right of action last month (see 2511180042), while the Senate unanimously supported a different version on Sept. 25 (see 2509250048). “Because these measures will carry over into 2026, Massachusetts remains a key state to watch as lawmakers evaluate how to align with or diverge from broader national trends,” CCIA said.