Skip to content

Privacy

Consumer privacy laws, data subject rights, consent and tracking.

245

On file

178

Became law

37

Still moving

15

Moved in 30 days

Passed both 5Passed one chamber 12In committee 13Introduced 3Proposed 4Enacted 26In force 131Adopted 21Ruled 7Vetoed 3Failed 20

245 items, page 3 of 5, newest action first

MovedMeasure
Nov 1, 202511 months ago
Personal Data Protection Law

EgyptLaw No. 151 of 2020Executive Regulations issued by Ministerial Decision No. 816 of 2025 and published in the Official Gazette

In forceIn forceUnverified
Oct 13, 202511 months ago
Digital Age Assurance Act

CACaliforniaAB 1043Signed by the governor; Chapter 675, Statutes of 2025

EnactedEnactedD (Democrat)
Oct 10, 202511 months ago
Regulation on transparency and targeting of political advertising

European UnionRegulation (EU) 2024/900Regulation applies in full

In forceIn force
Oct 10, 202511 months ago
DSA Guidelines on the Protection of Minors Online

European UnionOJ C/2025/5519Guidelines published in the Official Journal C series (C/2025/5519)

AdoptedAdopted
Oct 8, 202511 months ago
California Opt Me Out Act

CACaliforniaAB 566Signed by the governor; Chapter 465, Statutes of 2025

EnactedEnactedD (Democrat)
Oct 8, 202511 months ago
Data Brokers: Data Collection and Deletion

CACaliforniaSB 361Signed by the governor; Chapter 466, Statutes of 2025

In forceIn forceD (Democrat)
Oct 1, 202512 months ago
Montana Consumer Data Privacy Act amendments

MTMontanaSB 297Took effect

In forceIn forceR (Republican)
Oct 1, 202512 months ago
Privacy protections for biometric, genetic and neural data

MTMontanaSB 163Took effect

In forceIn forceR (Republican)
Sep 17, 20251 year ago
Strong Borders Act

CanadaBill C-2 (45th Parliament, 1st Session)Latest debate at second reading

IntroducedIntroduced
Sep 5, 20251 year ago
Homebuyers Privacy Protection Act

United States (federal)H.R. 2808Became Public Law 119-36

EnactedEnactedBipartisan
Sep 4, 20251 year ago
EDPS v SRB (pseudonymised data)

European UnionC-413/23 P (ECLI:EU:C:2025:645)Court of Justice (First Chamber) sets aside the General Court judgment and refers the case back

RuledRuled
Sep 1, 20251 year ago
Cybersecurity safe harbor for businesses

TXTexasSB 2610Took effect

In forceIn forceBipartisan
Sep 1, 20251 year ago
Electronic health records and AI in health care

TXTexasSB 1188Took effect

In forceIn forceR (Republican)
Sep 1, 20251 year ago
Genetic information security

TXTexasHB 130Took effect

In forceIn forceR (Republican)
Sep 1, 20251 year ago
Data broker notice requirements

TXTexasSB 1343Took effect

In forceIn forceBipartisan
Sep 1, 20251 year ago
Data broker regulation amendments

TXTexasSB 2121Took effect

In forceIn forceBipartisan
Aug 23, 20251 year ago
ANPD International Data Transfer Regulation

BrazilResolucao CD/ANPD No. 19/2024Twelve-month deadline for agents using contractual clauses to incorporate the ANPD standard contractual clauses ends

In forceIn force
Aug 14, 20251 year ago
Israel Privacy Protection Law Amendment No. 13

IsraelPrivacy Protection Law (Amendment No. 13), 5784-2024Law enters into force, one year after publication

In forceIn force
Aug 14, 20251 year ago
Walker Montgomery Protecting Children Online Act

MSMississippiHB 1126U.S. Supreme Court denied NetChoice application to vacate the Fifth Circuit stay of a preliminary injunction, leaving the law enforceable pending appeal

In forceIn forceR (Republican)
Jul 31, 20251 year ago
Minnesota Consumer Data Privacy Act (2024 commerce omnibus)

MNMinnesotaHF 4757Consumer Data Privacy Act took effect (postsecondary institutions must comply by 2029-07-31)

In forceIn forceD (Democrat)
Jul 17, 20251 year ago
Anti-CBDC Surveillance State Act

United States (federal)H.R. 1919On passage Passed by the Yeas and Nays: 219 - 210.

Passed one chamberPassed one chamberR (Republican)
Jul 16, 20251 year ago
Mexico constitutional reform on organic simplification (INAI and IFT dissolution)

MexicoDecree reforming the Constitution on organic simplification New Telecommunications and Broadcasting Law published, providing that the telecom-related constitutional changes take effect once the Comision Reguladora de Telecomunicaciones plenary is constituted

In forceIn force
Jul 15, 20251 year ago
Measures for the Administration of National Network Identity Authentication Public Services

ChinaMPS Order No. 173Measures enter into force

In forceIn force
Jul 7, 20251 year ago
New and emerging digital technologies and human rights (2025)

United NationsA/HRC/RES/59/11Adopted by the Human Rights Council without a vote at its 31st meeting (resolution 59/11)

AdoptedAdopted
Jul 7, 20251 year ago
Revised Federal Act on Data Protection (FADP)

SwitzerlandSR 235.1Last amended

In forceIn force
Jun 30, 20251 year ago
App store age verification (Act 481 of 2025)

LALouisianaHB 570Signed by the governor (Act 481)

In forceIn forceR (Republican)
Jun 24, 20251 year ago
An Act Concerning Broadband Internet, Gaming, Social Media, Online Services and Consumer Contracts

CTConnecticutSB 1295Signed by the governor (Public Act 25-113)

In forceIn force
Jun 19, 20251 year ago
Ban on sale of precise geolocation data and minors' data

OROregonHB 2008Chapter 251, 2025 Laws

In forceIn forceD (Democrat)
Jun 16, 20251 year ago
Social Media Use by Minors

FLFloridaSB 868Died in House Messages

FailedFailedR (Republican)
Jun 12, 20251 year ago
Vermont Age-Appropriate Design Code (Act 63 of 2025)

VTVermontS.69Signed by the Governor; Act 63 of 2025

EnactedEnactedD (Democrat)
Jun 12, 20251 year ago
Personal Data Privacy Act

MIMichiganSB 359Reported favorably without amendment and referred to Committee of the Whole

In committeeIn committeeD (Democrat)
Jun 11, 20251 year ago
Privacy act coverage of motor vehicle manufacturers

OROregonHB 3875Chapter 163, 2025 Laws, effective on the 91st day after adjournment sine die

In forceIn force
Jun 10, 20251 year ago
Privacy and Other Legislation Amendment Act 2024

AustraliaAct No. 128, 2024Schedule 2 statutory tort for serious invasions of privacy commences (6 months after Royal Assent unless proclaimed earlier)

In forceIn force
Jun 3, 20251 year ago
Processing of children's data and social media age verification

NVNevadaSB 63No further action taken at end of session

FailedFailed
May 30, 20251 year ago
Age-Appropriate Online Design Code Act

NENebraskaLB 504Approved by the governor

EnactedEnactedR (Republican)
May 13, 20251 year ago
Internet Pornography; Minors; Age Verification

AZArizonaHB 2112Signed by Governor, Chapter 193

In forceIn forceR (Republican)
May 12, 20251 year ago
Unauthorized disclosure of intimate images (Act 37 of 2025)

SCSouth CarolinaH 3058Signed by Governor; Act No. 37

In forceIn forceR (Republican)
May 9, 20251 year ago
Algorithmic Pricing Disclosure (FY2026 budget)

NYNew YorkS 3008-C, Part XSigned by the governor as part of the FY2026 budget (Chapter 58 of 2025)

In forceIn force
May 9, 20251 year ago
Capture or Use of Biometric Identifier Act (CUBI) amendments

TXTexasHB 3186Attorney general announced $1.375 billion privacy settlement with Google that included biometric data claims

In forceIn forceR (Republican)
May 1, 20251 year ago
Measures for Personal Information Protection Compliance Audits

ChinaCAC Order No. 18Measures enter into force

In forceIn force
Apr 29, 20251 year ago
Personal Data Privacy/Social Media Safety

NCNorth CarolinaHB 462Re-referred to House Committee on Commerce and Economic Development

In committeeIn committeeBipartisan
Apr 24, 20251 year ago
Data Privacy: Consumer Data Processing and Rights (2025)

ALAlabamaHB 283Referred to Senate Fiscal Responsibility and Economic Development; died at adjournment

FailedFailedR (Republican)
Apr 23, 20251 year ago
DMA non-compliance decisions against Apple and Meta

European UnionCommission fines Apple 500 million euros and Meta 200 million euros

RuledRuled
Apr 21, 20251 year ago
Arkansas Children and Teens' Online Privacy Protection Act

ARArkansasHB 1717Became Act 952

In forceIn forceR (Republican)
Apr 2, 20251 year ago
Neurotechnology and human rights

United NationsA/HRC/RES/58/6Adopted by the Human Rights Council without a vote at its 55th meeting (resolution 58/6)

AdoptedAdopted
Mar 27, 20251 year ago
Digital Choice Act (Data Sharing Amendments)

UTUtahHB 418Signed by the governor

In forceIn forceR (Republican)
Mar 26, 20251 year ago
Consumer Privacy Act

NCNorth CarolinaSB 757Referred to Senate Committee on Rules and Operations

In committeeIn committeeR (Republican)
Mar 25, 20251 year ago
Artificial Intelligence Amendments (mental health chatbots)

UTUtahHB 452Signed by the governor

In forceIn forceR (Republican)
Mar 25, 20251 year ago
European Health Data Space Regulation

European UnionRegulation (EU) 2025/327Enters into force (EUR-Lex date; the Commission page gives 26 March 2025)

In forceIn force
Mar 20, 20251 year ago
General Application and Implementation Directive (GAID) 2025

NigeriaNDPC/NDP ACT-GAID/01/2025Issued by the National Commissioner of the Nigeria Data Protection Commission

AdoptedAdopted