Skip to content

Menu

Network by SubjectChannelsBlogsHomeAboutContact
AI Legal Journal logo
Subscribe
Search
Close
PublishersBlogsNetwork by SubjectChannels
Subscribe

Proposed State Privacy Law Update: June 9, 2025

By David Stauss on June 8, 2025
Email this postTweet this postLike this postShare this post on LinkedIn

Keypoint: Last week, the Connecticut legislature passed an amendment to the state’s consumer data privacy law and bills advanced in Oregon, California, Texas, Nevada, Louisiana, and New York.

Below is the twenty second weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change.

Table of Contents

  1. What’s New
  2. AI Bills
  3. Bill Tracker Chart

1. What’s New

The big news last week was Connecticut Senator James Maroney’s SB 1295 passing the legislature. The bill significantly revises Connecticut’s existing data privacy law, including modifying its applicability standard, exemptions, definitions, consumer rights, data minimization provisions, and children’s privacy sections.

In Oregon, Governor Kotek signed HB 2008 in law. The bill amends Oregon’s consumer data privacy law to prohibit targeted advertising, profiling, and the sale of personal data if a controller has actual knowledge or willfully disregards a consumer is 13-15 years old. Controllers also cannot sell precise geolocation data. 

In other news, California’s cross-over deadline was Friday, June 6. The following bills met that deadline:

  • AB 566 – opt-out preference signal
  • AB 1043 – age verification signals
  • SB 361 – amendments to data broker law
  • SB 771 – social media
  • SB 690 – amendments to the California Invasion of Privacy Act
  • SB 354 – Insurance Consumer Privacy Protection Act of 2025

Turning to new bills, Michigan Democrat Senator Rosemary Bayer reintroduced the Michigan Personal Data Privacy Act (SB 359). We have been tracking this bill for several years. The Democrats control the Michigan Senate and governorship, but the Republicans flipped the House in last year’s election.

Moving to minors’ privacy bills, Texas Governor Abbott signed SB 2420 (App Store Accountability Act) into law.

Prior to closing for the year, the Nevada legislature passed SB 63, which creates obligations for entities that process the personal data of children under 13 years of age.

Meanwhile, Louisiana’s HB 570 (Protection of Children on Applications) appears to be headed to a conference committee after the Senate passed an amended version of the bill and the House voted to reject the amendments.

Finally, in New York, S4505 (warning labels for social media platforms) advanced to a third reading in the Senate. New York’s legislature closes on June 12.

2. AI Bills

Our latest edition of Byte Back AI is now available to subscribers. Subscriptions start as low as $50/month. In this edition, we provide:

  • Updates on new laws enacted in Colorado, Nebraska, and Nevada, bills passing the legislatures in Connecticut and Nevada, and nearly two dozen bills crossing chambers in California.
  • A summary of California floor hearings from both chambers.
  • Our special feature – a summary of New York’s pricing algorithm law. 
  • Our “three things to know this week.”
  • An updated state AI bill tracker chart.

Click here for more information on paid subscriptions.

3. Bill Tracker Chart

For more information on all of the privacy bills introduced to date, including links to the bills, bill status, last action, and hearing dates, please see our bill tracker chart.

Photo of David Stauss David Stauss

David is leader of Husch Blackwell’s privacy and cybersecurity practice group. He routinely counsels clients on responding to data breaches, complying with privacy laws such as GDPR and the California Consumer Privacy Act, and complying with information security statutes. He also represents…

David is leader of Husch Blackwell’s privacy and cybersecurity practice group. He routinely counsels clients on responding to data breaches, complying with privacy laws such as GDPR and the California Consumer Privacy Act, and complying with information security statutes. He also represents clients in data security-related litigation. David is certified by the International Association of Privacy Professionals as a Privacy Law Specialist, Certified Information Privacy Professional (US), Certified Information Privacy Technologist, and Fellow of Information Privacy.

Read more about David StaussDavid's Linkedin Profile
Show more Show less
  • Posted in:
    Privacy & Data Security
  • Blog:
    Byte Back
  • Organization:
    Husch Blackwell LLP
  • Article: View Original Source

LexBlog logo
Copyright © 2025, LexBlog. All Rights Reserved.
Legal content Portal by LexBlog LexBlog Logo