New York senators delivered a controversial New York health data privacy bill to Gov. Kathy Hochul (D) on Monday, nearly a year after it quickly passed the legislature back in January (see 2501280023). Transmission of S-929 gives Hochul 10 days to decide its fate, a spokesperson for the governor's office said Tuesday. “The Governor will review the legislation."
AI Privacy
AI privacy concerns are growing as copyrighted works and personal data are used to train, optimize and operate machine learning systems. From facial recognition to inference risks, AI applications often test the limits of existing privacy laws. Regulators worldwide are developing safeguards to govern data use, bias, transparency and consent in AI development. This page tracks legislation, regulatory frameworks and enforcement actions at the intersection of AI and data protection.
The White House this week will issue an executive order blocking state AI regulation through national standards, President Donald Trump said Monday in a post on Truth Social.
Vermont could next year join California in requiring browsers to include an option for activating global opt-out preference signals (OOPS). Rep. Monique Priestley (D), who also will be pursuing a comprehensive privacy bill and at least one data broker measure (see 2512040015), has a draft bill pending on “Browser Opt-Out,” among many other bills about data and AI, according to Priestley’s webpage as updated Friday.
Shadow AI remains a significant challenge for businesses, said panelists during a Practising Law Institute webinar Monday. They discussed an IBM Cost of a Data Breach 2025 report that focused on the problem of employees using AI platforms that aren't sanctioned by the workplace.
India's detailed Digital Personal Data Protection Act (DPDPA) will potentially be a substantial compliance burden for companies, Kochlar & Company technology attorney Stephen Mathias said in a Hogan Lovells podcast Thursday.
The Office of the Australian Privacy Commissioner is "not waiting around" for reform to the country's Privacy Act to regulate AI, Privacy Commissioner Carly Kind posted Thursday.
Florida Gov. Ron DeSantis (R) presented a proposal Thursday that would establish an AI Bill of Rights to protect consumers. He additionally offered a plan to keep state residents from paying for Hyperscale AI Data Centers and to enfranchise local governments to reject their development.
States have a role in regulating AI, several Senate Republicans told us Thursday after House Republicans dropped plans to include an AI moratorium in Congress’ defense spending package (see 2512030038).
States' AI regulatory landscape related to privacy is “very fragmented,” and companies are struggling to navigate it, said Simonne Brousseau, a privacy and AI lawyer at Faegre Drinker, at a vCon Foundation conference Wednesday about AI and telecom issues. Brousseau said privacy, like data breaches, is governed by a patchwork of requirements across the country, all saying somewhat different things. She said AI increasingly faces a similar patchwork approach, with legions of AI bills being proposed in states.
House Majority Leader Steve Scalise, R-La., told reporters Tuesday that a compromise version of the FY 2026 National Defense Authorization Act still under negotiation won’t include language to preempt states’ AI laws, amid ongoing concerns about proposals tying such a pause to funding from the $42.5 billion BEAD broadband program. President Donald Trump has been eyeing a draft executive order that could force NTIA to deny non-deployment BEAD funding to states with AI laws that the administration deems overly onerous (see 2511200057).