Skip to content

Menu

Network by SubjectChannelsBlogsHomeAboutContact
AI Legal Journal logo
Subscribe
Search
Close
PublishersBlogsNetwork by SubjectChannels
Subscribe

Proposed State Privacy Law Update: May 27, 2025

By David Stauss on May 26, 2025
Email this postTweet this postLike this postShare this post on LinkedIn

Keypoint: Last week, Oregon and New Jersey advanced bills to amend their state’s consumer data privacy laws, California committees advanced several bills, Nebraska enacted a social media law, and Texas advanced several social media bills.

Below is the twentieth weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change.

Table of Contents

  1. What’s New
  2. AI Bills
  3. Bill Tracker Chart

1. What’s New

The Oregon Senate passed HB 2008 on May 21. The bill amends Oregon’s consumer data privacy law to prohibit targeted advertising, profiling, and the sale of personal data if a controller has actual knowledge or willfully disregards a consumer is 13-15 years old. Controllers also cannot sell precise geolocation data. The bill already passed the House but was amended in the Senate and will need to go back to the House for concurrence.

In New Jersey, the Assembly unanimously passed A 5017. The bill amends the state’s consumer data privacy law to exempt national securities associations and adds a data level exemption for insurance fraud detection activities.

In California, May 23 was the deadline for fiscal committees to hear and report to the floor bills introduced in their house. The deadline resulted in movement on several bills we are tracking. In the Senate, three bills were amended, passed out of the Appropriations committee, and read a second time on the Senate floor: SB 690 (CIPA amendment), SB 771 (social media), and SB 354 (Insurance Consumer Privacy Protection Act of 2025). Meanwhile, SB 44 (brain-computer interfaces: neural data) was held in the Appropriations committee.

In the Assembly, AB 1043 (age verification signals) was amended, passed out of the Appropriations committee, and read a second time on the Assembly floor. Conversely, AB 1355 (location privacy) was held under submission in the Appropriations committee.

Moving forward, June 6 is the crossover deadline for bills in California.

In Nebraska, the governed signed the Parental Rights in Social Media Act (LB 383) into law.

In Texas, three bills were favorably reported out of committee: SB 1860 (SCOPE Act amendment) and SB 2881 (social media) were favorably reported out of House committees while HB 186 (social media) was favorably reported out of a Senate committee. All three bills previously passed their house of origin.

Finally, the Minnesota legislature closed on May 19 without passing any of the seven bills we had tracked.

2. AI Bills

Our latest edition of Byte Back AI is now available to subscribers. Subscriptions start as low as $50/month. In this edition, we provide:

  • Updates on new laws in Florida, Maryland, Montana, and Nebraska; the Nevada and Texas legislatures passing bills; and bills crossing chambers in California, Connecticut, Illinois, Nevada, New York, and Texas.
  • Our special feature of the week – a summary of California AB 410 (amendments to California’s bot disclosure law).
  • Our “three things to know this week.”
  • An updated state AI bill tracker chart.

Click here for more information on paid subscriptions.

3. Bill Tracker Chart

For more information on all of the privacy bills introduced to date, including links to the bills, bill status, last action, and hearing dates, please see our bill tracker chart.

Photo of David Stauss David Stauss

David is leader of Husch Blackwell’s privacy and cybersecurity practice group. He routinely counsels clients on responding to data breaches, complying with privacy laws such as GDPR and the California Consumer Privacy Act, and complying with information security statutes. He also represents…

David is leader of Husch Blackwell’s privacy and cybersecurity practice group. He routinely counsels clients on responding to data breaches, complying with privacy laws such as GDPR and the California Consumer Privacy Act, and complying with information security statutes. He also represents clients in data security-related litigation. David is certified by the International Association of Privacy Professionals as a Privacy Law Specialist, Certified Information Privacy Professional (US), Certified Information Privacy Technologist, and Fellow of Information Privacy.

Read more about David StaussDavid's Linkedin Profile
Show more Show less
  • Posted in:
    Privacy & Data Security
  • Blog:
    Byte Back
  • Organization:
    Husch Blackwell LLP
  • Article: View Original Source

LexBlog logo
Copyright © 2025, LexBlog. All Rights Reserved.
Legal content Portal by LexBlog LexBlog Logo