Skip to content

Privacy

Consumer privacy laws, data subject rights, consent and tracking.

245

On file

178

Became law

37

Still moving

15

Moved in 30 days

Passed both 5Passed one chamber 12In committee 13Introduced 3Proposed 4Enacted 26In force 131Adopted 21Ruled 7Vetoed 3Failed 20

245 items, page 2 of 5, newest action first

MovedMeasure
Apr 185 months ago
FISA Section 702 short-term extension (H.R. 8322)

United States (federal)H.R. 8322Became Public Law 119-84

EnactedEnactedR (Republican)
Apr 175 months ago
Data Privacy: Consumer Data Processing and Rights

ALAlabamaHB 351Enacted as Act 2026-552

EnactedEnactedR (Republican)
Apr 145 months ago
Omnibus bill amending the Age-Appropriate Online Design Code Act and social media deceptive practices

NENebraskaLB 838Approved by the governor

In forceIn forceR (Republican)
Apr 135 months ago
Maine Online Data Privacy Act

MEMaineLD 1822House failed to enact 70-79; Senate insisted; placed in legislative files (dead)

FailedFailedD (Democrat)
Apr 135 months ago
Automatic content recognition data consent

KYKentuckyHB 692Signed by the governor (Acts Ch. 118)

EnactedEnactedR (Republican)
Apr 135 months ago
Consumer Data Protection Act; precise geolocation data

VAVirginiaSB 338Approved by the governor (Chapter 820)

In forceIn forceD (Democrat)
Apr 105 months ago
App Store Accountability Act

KSKansasSB 372Died on House calendar

FailedFailed
Apr 75 months ago
Genetic information in long-term care, life and disability insurance

MNMinnesotaHF 3701Author added; Died when the 2025-2026 biennium ended without final passage

FailedFailedD (Democrat)
Apr 65 months ago
Limits on public body data sharing with data brokers

OROregonSB 1587Chapter 96, 2026 Laws, effective June 5, 2026

In forceIn forceD (Democrat)
Mar 306 months ago
Digitally fabricated intimate materials

SDSouth DakotaSB 41Signed by the Governor

In forceIn force
Mar 306 months ago
Driver privacy protections (license plate readers)

WAWashingtonSB 6002Governor signed; Chapter 239, 2026 Laws

In forceIn forceD (Democrat)
Mar 266 months ago
Minnesota Age-Appropriate Design Code Act (2026)

MNMinnesotaHF 4511Author added; Died when the 2025-2026 biennium ended without final passage

FailedFailedD (Democrat)
Mar 256 months ago
Ban on surveillance-based price and wage discrimination

MNMinnesotaHF 3794Heard again in House Commerce Finance and Policy Committee; Died when the 2025-2026 biennium ended without final passage

FailedFailedD (Democrat)Unverified
Mar 256 months ago
Biometric data consent, sale ban and deletion

MNMinnesotaHF 4005Author added; Died when the 2025-2026 biennium ended without final passage

FailedFailedR (Republican)
Mar 206 months ago
Oklahoma consumer data privacy law

OKOklahomaSB 546Approved by Governor

EnactedEnactedR (Republican)
Mar 186 months ago
Data broker registration

MNMinnesotaHF 4456Referred to Commerce Finance and Policy; Died when the 2025-2026 biennium ended without final passage

FailedFailedD (Democrat)
Mar 176 months ago
Digital Statute of Children and Adolescents (ECA Digital)

BrazilLei 15.211/2025 (PL 2628/2022)Law enters into force (date set by Law 15.352/2026, after Provisional Measure 1.319/2025 set a six-month vacatio legis)

In forceIn force
Mar 166 months ago
Children and Teens’ Online Privacy Protection Act

United States (federal)S. 836Held at the desk.

Passed one chamberPassed one chamberBipartisan
Mar 136 months ago
Artificial Intelligence Bill of Rights

FLFloridaSB 482Died in House Messages

FailedFailedR (Republican)
Mar 126 months ago
California Age-Appropriate Design Code Act

CACaliforniaAB 2273Ninth Circuit held most challenged provisions unconstitutional (NetChoice v. Bonta); law remains largely enjoined and is set to be replaced by AB 2246 (2026)

In forceIn forceBipartisan
Mar 126 months ago
NetChoice, LLC v. Bonta (second appeal, Age-Appropriate Design Code Act)

United States (federal)No. 25-2366Opinion issued

RuledRuled
Mar 66 months ago
Data privacy for government entities

WYWyomingSF 20Signed by the Governor; assigned Chapter 48

In forceIn force
Mar 46 months ago
Driver Privacy and Safety Act

NMNew MexicoSB 40Signed by the governor, Chapter 20

In forceIn forceD (Democrat)
Feb 277 months ago
Consumer Data Protection Act; social media platforms and minors

VAVirginiaSB 854Preliminary injunction issued by U.S. District Court in NetChoice's challenge; the state has appealed

In forceIn forceD (Democrat)
Feb 267 months ago
Biological and Neural Data Protection

ALAlabamaHB 263Read second time in the Senate; no final passage before adjournment

FailedFailedR (Republican)
Feb 257 months ago
Law restructuring the ANPD as the National Data Protection Agency

BrazilLei 15.352/2026 (conversion of Medida Provisoria 1.317/2025)Converted into Law 15.352/2026, published in an extra edition of the Diario Oficial da Uniao and in force on publication

In forceIn force
Feb 67 months ago
Data (Use and Access) Act 2025

United Kingdom2025 c. 18Section 138 offences on creating or requesting purported intimate images of adults without consent in force

In forceIn force
Feb 57 months ago
Age-Appropriate Code Design (Social Media Regulation Act, Act 96 of 2026)

SCSouth CarolinaH 3431Signed by Governor; Act No. 96

In forceIn forceR (Republican)
Feb 57 months ago
App Store Accountability Act

UTUtahSB 142Industry group CCIA filed a First Amendment challenge in U.S. District Court for the District of Utah

In forceIn forceR (Republican)
Feb 37 months ago
Mississippi Consumer Data Privacy Act

MSMississippiSB 2015Died in committee

FailedFailedD (Democrat)Unverified
Jan 148 months ago
Artificial Intelligence Basic Act

TaiwanPresidential Order Hua-Zong-Yi-Yi-Zi No. 11500001671Promulgated by presidential order and enters into force on promulgation

In forceIn force
Jan 128 months ago
Protecting personal data privacy

WAWashingtonHB 1671Reintroduced and retained in House Appropriations; not passed before the 2026 session ended

FailedFailedD (Democrat)
Jan 118 months ago
An Act to Regulate Employer Surveillance to Protect Workers

MEMaineLD 61Became law without the governor's signature (Public Law chapter 524)

In forceIn forceD (Democrat)
Jan 18 months ago
Jan 18 months ago
Decision Amending the Cybersecurity Law

ChinaPresidential Order No. 61Amended Cybersecurity Law enters into force

In forceIn force
Jan 18 months ago
Law on Personal Data Protection

VietnamLaw No. 91/2025/QH15Law takes effect

In forceIn force
Jan 18 months ago
Child Digital Safety Law

United Arab EmiratesFederal Decree-Law No. 26 of 2025Entered into force; one-year window for platforms to regularize status begins

In forceIn forceUnverified
Jan 18 months ago
GDPR Procedural Regulation (cross-border enforcement)

European UnionRegulation (EU) 2025/2518Enters into force

In forceIn force
Jan 18 months ago
Measures for Certification of Personal Information Export

ChinaCAC and SAMR Order No. 20Measures enter into force

In forceIn force
Dec 19, 20259 months ago
New York Health Information Privacy Act

NYNew YorkS 929 / A 2141Vetoed by the governor

VetoedVetoedD (Democrat)
Dec 18, 20259 months ago
Promotion and protection of human rights in the context of digital technologies (2025)

United NationsA/RES/80/215Adopted by the General Assembly at its 69th plenary meeting on the report of the Third Committee (A/80/545) (resolution 80/215)

AdoptedAdopted
Dec 17, 20259 months ago
Global Digital Compact (Pact for the Future)

United NationsA/RES/79/1 (annex I)Follow-up: WSIS+20 outcome document (resolution 80/173) adopted, referring to the objectives and commitments of the Compact

AdoptedAdopted
Dec 11, 20259 months ago
Children and Teens’ Online Privacy Protection Act

United States (federal)H.R. 6291Forwarded by Subcommittee to Full Committee by the Yeas and Nays: 14 - 10.

In committeeIn committeeR (Republican)
Nov 14, 202510 months ago
Mexico Federal Law on Protection of Personal Data Held by Private Parties (2025)

MexicoLey Federal de Proteccion de Datos Personales en Posesion deAmended by decree harmonizing laws with the National Code of Civil and Family Procedures (DOF 14-11-2025)

In forceIn force
Nov 14, 202510 months ago
Mexico General Law on Protection of Personal Data Held by Obligated Subjects (2025)

MexicoLey General de Proteccion de Datos Personales en Posesion deAmended by decree published in the Diario Oficial de la Federacion (DOF 14-11-2025)

In forceIn force
Nov 13, 202510 months ago
Digital Personal Data Protection Act, 2023

IndiaAct No. 22 of 2023G.S.R. 843(E) brings definitions, the Data Protection Board provisions (sections 18 to 26) and rule-making powers into force; G.S.R. 844(E) establishes the Data Protection Board of India

In forceIn force
Nov 13, 202510 months ago
Digital Personal Data Protection Rules, 2025

IndiaG.S.R. 846(E)Final rules notified; rules 1, 2 and 17 to 21 (Data Protection Board) come into force on publication

In forceIn force
Nov 11, 202510 months ago
Personal Data Protection Act Amendment

TaiwanPresidential Order Hua-Zong-Yi-Jing-Zi No. 11400114521Amendment promulgated by presidential order; effective date to be set by the Executive Yuan

EnactedEnacted
Nov 11, 202510 months ago
Recommendation on the Ethics of Neurotechnology

United NationsUNESCO Recommendation on the Ethics of NeurotechnologyAdopted by the UNESCO General Conference at its 43rd session in Samarkand, Uzbekistan

AdoptedAdopted
Nov 2, 202510 months ago
Executive Regulations of the Personal Data Protection Law

EgyptMinisterial Decision No. 816 of 2025Entered into force

In forceIn forceUnverified