A company complying with Maryland’s data minimization standard would be in compliance with a similar measure proposed in a Massachusetts comprehensive privacy bill that’s moving quickly toward passage, said Massachusetts Sen. Michael Moore (D) on the floor Thursday. However, Moore also said he’s fine with Massachusetts being an “outlier” among the 20 states with privacy laws.
Data Brokers and Delete Acts
Data brokers aggregate and sell personal data—often without clear user awareness. In response, many U.S. states are passing “delete acts” and other laws to increase transparency, require registration and give users control over data sales. These laws will reshape compliance and collection practices for brokers and companies relying on third-party data. This page tracks legislation, rulemaking and enforcement trends affecting the data brokerage industry.
The California Privacy Protection Agency received final approval on automated decision-making technology (ADMT) and other rules from the Office of Administrative Law (OAL), the CPPA said Tuesday. Meanwhile, in materials released ahead of a Friday board meeting, the CPPA disclosed that it has seen a steady increase in consumer privacy complaints over the last two years.
A federal appeals court should affirm a lower court’s decision and block Florida’s social media ban on children because it violates the First Amendment, the American Civil Liberties Union and consumer groups said in a filing Friday, siding with the tech industry (see 2509120040). The groups also highlighted privacy concerns related to age verification (docket 25-11881).
Even without a private right of action, a Massachusetts comprehensive privacy bill nearing a Senate floor vote could still be the strongest of about 20 states with such laws, Electronic Privacy Information Center (EPIC) Deputy Director Caitriona Fitzgerald said in an interview Friday. While legislators previously cut the right for individuals to sue -- limiting enforcement authority to the Massachusetts’ attorney general -- they kept data minimization requirements like those from Maryland’s privacy law.
Massachusetts legislators removed a private right of action from a leading comprehensive privacy bill on Thursday.
BOSTON -- How a company communicates with privacy enforcers and responds to potential legal action are major factors in whether a formal, public settlement is issued, Tyler Bridegan, privacy and tech enforcement director in the Texas attorney general's office, said at the IAPP AI Governance conference Thursday.
Sharing geolocation in real time is becoming increasingly common but carries significant privacy risks, French data protection authority CNIL said Wednesday.
The California Privacy Protection Agency Board will discuss enforcement priorities and potential changes to automated decisionmaking technology, delete-request and data broker regulations at a Sept. 26 meeting.
The California legislature passed two laws about artificial intelligence and automated decision systems on Friday, the last day for legislators to pass bills. In addition, it approved a measure on age-verification signals. Gov. Gavin Newsom (D) has until Oct. 12 to sign or veto the bills.
The California legislature passed two bills on AI chatbots Thursday. Nearing the finish line are bills on automated decisions by employers and social media warning labels. The legislature passed measures earlier in the day on universal opt-out preference signals, data brokers and social media data deletion (see 2509110066).