State Privacy Update
In the absence of federal action, individual states continue to consider new privacy bills. While AAF supports a national privacy law, we often provide comments to state lawmakers with the goal of ensuring all state laws align as closely as possible with others for ease of business compliance and to ensure all consumers receive the same degree of protection.
On March 21, 2024, Florida HB 3 (a bill to prohibit minors under the age of 15 from having social media accounts) was signed by Senate and House leadership. Governor Ron DeSantis (R) approved the bill which will take effect on January 1, 2025.
The Georgia Consumer Privacy Protection Act under SB 473 was heard on March 13, 2024 in the House Technology & Infrastructure Innovation Committee. We provided our comments to Georgia lawmakers. The Georgia General Assembly adjourned in late March without passing privacy legislation.
The Kentucky legislature has sent omnibus privacy legislation to Governor Andy Beshear (D) to sign, veto, or allow it to become law without his signature. Because the measure was relatively business and consumer friendly, AAF did not weigh in on the bill.
The Maine Joint Judiciary Committee has held numerous closed work sessions on two privacy bills LD 1973 and LD 1977 each of which have undergone numerous changes. We submitted a letter to the committee raising issues with the proposals on 3/18. We anticipate sending another to legislative leadership once the Joint Judiciary Committee advances a version of the pending privacy legislation to the floor.
We have provided our views on privacy legislation in Maryland which exists in many versions. HB 567 (updated draft here) was heard in the Senate Finance Committee. Its companion, SB 541 (updated draft here) was heard in the House Economic Matters Committee. The Senate bill would, in part, remove the original bill’s opt in consent requirement for marketing and content personalization as well as create a cure period for violations that occur on or before April 1, 2027. The House version of the bill does not include those same changes. In order to become law the bills must be reconciled in a conference committee prior to the General Assembly’s expected adjournment on April 8. We have also expressed our opposition to a briefly considered advertising tax in Maryland.
In addition to the letter, AAF’s EVP of Government Affairs, Clark Rector, and industry colleagues spent much of March 5 in Annapolis talking to lawmakers and their staffs about our concerns with the bills.
We have written to Minnesota lawmakers regarding omnibus privacy legislation. The bill has been through multiple versions and committees. As of this writing, there is no action scheduled, but the primary sponsor has indicated a desire to move forward.
Early in the month, we provided comments on Vermont legislation that was later passed by the Vermont House Committee on Commerce and Economic Development and subsequently by the full House. The passed version of the bill includes a Private Right of Action, a requirement to disclose the names of third-party partners in response to an access request, an “individual” and “general” opt-out specific to data brokers, and other terms that diverge from privacy legislation in other states. We anticipate the legislation will be considered in the Senate soon and will provide comments when appropriate. |