New State Privacy Laws Enacted and Considered
Lawmakers in Florida and Texas have enacted new comprehensive state privacy laws.
Florida SB 262, was written to apply only to companies with more than $1 billion in revenue, and also glean at least half of their revenue from ads, or operate a smart speaker or operate an app store with at least 250,000 different apps. Unfortunately, despite the apparent intent of lawmakers, the AAF believes the law will also negatively impact small businesses. The law also requires large tech companies targeting ads based on non-pseudonymous data to allow consumers to opt out. Companies that target ads based on pseudonymous data—such as information linked to cookies—are not required to allow opt-outs, provided the pseudonymous data is stored separately from identifiable data. AAF and many of our Florida advertising federations communicated concerns with legislators numerous times.
The Texas Data Privacy and Security Act requires companies to allow residents to opt out of targeted advertising—defined by the bill as serving ads to people based on their online activity over time and across non-affiliated websites or apps. It also requires companies to honor universal opt-out tools—such as opt-out signals that consumers can send through their browsers—provided the companies also honor those signals in other states. Also enacted was HB 18 which is intended to protect youths under the age of 18 online. AAF and our Texas chapters provided comments on both the comprehensive and youth-focused bills.
In addition to these newly enacted laws, additional states are considering privacy bills. In recent weeks, AAF commented on legislation being considered in Wyoming, Connecticut, New York, Louisiana, Delaware, and Oregon.
AAF will soon provide members with an overview of all enacted state privacy laws.