SB-318 is a legislative proposal to update SB-205, Colorado’s AI Act (see 2508070039).
States show growing interest in privacy laws covering neural and neurotechnology data, Future of Privacy Forum (FPF) said Tuesday. Four states have enacted laws so far: Montana, California, Connecticut, and Colorado.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
New Jersey’s proposed privacy rules might be the most “aggressive” in the country, particularly the potential limitations on AI-related data scraping, attorneys and a tech industry official said in interviews.
Colorado’s proposed kids privacy rules show “a continued commitment by regulators to protect the data of minors,” Goodwin privacy attorney Jacqueline Klosek and two colleagues blogged Thursday.
There’s “no valid reason” to amend the Colorado AI Act, the law's House author, Rep. Brianna Titone (D) emailed Privacy Daily on Wednesday.
Colorado will reconsider its comprehensive AI law during a special session this month, Gov. Jared Polis (D) announced Wednesday, as expected (see 2505300046).
New Jersey’s Office of Consumer Protection delayed until Sept. 2 the deadline to submit comments on draft rules for implementing the New Jersey Data Privacy Act (NJDPA), according to the office’s website. The comments were previously due Aug. 1.
Minnesota's comprehensive privacy law that took effect Thursday uniquely requires companies to allow consumers to question their automated decisions. The law also includes uncommon requirements about material changes to privacy polices and giving lists of third parties to consumers. While companies will also for the first time face requirements such as having to conduct data inventories and appoint chief privacy officers, many of the law's stipulations are already best practices, privacy lawyers told us.
Colorado plans to forego a mandate that companies verify users' ages in a rulemaking that updates the state’s comprehensive privacy law. But when enforcing kids privacy restrictions, the state's attorney general could consider companies’ use of age-estimation technologies, said draft rules released Tuesday.