If tracking AI legislation is giving you whiplash, you’re not the only one.
In February, I wrote about the 24-Hour AI News Cycle: https://www.stoelprivacyblog.com/2025/02/articles/ai/the-24-hour-ai-news-cycle-keeping-up-with-legal-and-regulatory-developments/. February is ancient history, and the AI news cycle has become even further compressed since then.
Now, at the end of June, we stand at a crossroads. H.R. 1 (“One
The UK’s Data (Use and Access) Act received Royal Assent last Thursday, June 19th, bringing into law some significant changes to the country’s post Brexit data protection framework, among an array of other, related rules (on matters ranging from financial conduct to smart meters and “underground assets,” which is more to do with pipes than
For businesses subject to the California Consumer Privacy Act (CCPA), a compliance step often overlooked is the requirement to annually update the businesses online privacy policy. Under Cal. Civ. Code § 1798.130(a)(5), CCPA-covered businesses must among other things update their online privacy policies at least once every 12 months. Note that CCPA regulations establish content
Keypoint: Connecticut once again moves the needle on state privacy laws while at the same time integrating changes from other state laws.
On June 25, Connecticut Governor Lamont signed Senator James Maroney’s SB 1295 into law. The bill makes several notable changes to Connecticut’s existing consumer data privacy law, including modifying its applicability standard, exemptions,
As AI tools and modern communication platforms become increasingly embedded in corporate operations, the DOJ Antitrust Division has released an updated Evaluation of Corporate Compliance Programs in Criminal Antitrust Investigations, marking a significant expansion in DOJ expectations around artificial intelligence, ephemeral messaging, and data-driven monitoring.
This updated guidance provides a clearer roadmap for what the
The intersection of AI and healthcare is outpacing the development of laws and regulations governing the technology. Even in the early days of AI transformation, this is creating uncertainty for healthcare organizations. Leveraging existing frameworks and creating a culture of collaborative compliance can help organizations navigate these challenges without stifling innovation. Sumaya Noush, partner at
Artificial intelligence (AI) companion apps have been in the news, with Commissioner Melissa Holyoak of the Federal Trade Commission calling for a study on AI companions earlier this month, and lawmakers at the state and federal level voicing concerns about the technologies. In response, New York has enacted the first law requiring safeguards for AI
On June 5, 2025, Nevada Governor Joe Lombardo signed AB 406, a law regulating the use of artificial intelligence (AI) for mental and behavioral healthcare. AB 406 comes as other states, such as Utah and New York, have taken steps to regulate AI chatbots, including AI chatbots providing mental health services. AB 406
The Attorney Generals of California, Connecticut, Delaware, New Jersey, Oregon and Vermont wrote a letter June 23, 2025 to Senate Majority Leader John Thune and Senate Minority Leader Chuck Schumer, objecting to a proposed AI enforcement moratorium that is in the One Big Beautiful Bill.
The key arguments against the ban are:
On June 2, 2025, the New Jersey Attorney General’s Division of Consumer Affairs released proposed rules (57 N.J.R. 1101(a)) pursuant to the New Jersey Data Privacy Act (N.J.S.A. 56:8-166.4 et seq.). Although the proposed rules have many similarities to California’s current privacy regulations, there are some surprises. Among other things, New Jersey has proposed