Proposed State Privacy Law Update: April 7, 2025
Keypoint: The Montana and Colorado legislatures passed bills while bills moved out of committee in Arkansas, Oregon, Texas, and California.
Below is the thirteenth weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change.
Table of Contents
- What’s New
- AI Bills
- Bill Tracker Chart
1. What’s New
Two states passed bills through the legislatures last week. First, Montana‘s SB 163 passed the legislature on April 3. The bill amends Montana’s Genetic Information Privacy Act to add neurotechnology data.
Meanwhile, Colorado‘s SB 86 (protections for users of social media) passed the legislature on April 4.
Both bills will next move to their state governors for consideration.
Moving on to consumer data privacy bill developments, in Arkansas, an amended SB 258 was returned by committee with the recommendation that it be passed. The Arkansas legislature closes Friday, April 11.
In Oregon, a work session was held on HB 3875 on April 1, and the bill received a do pass recommendation on April 4. The bill provides that a motor vehicle manufacturer and an affiliate of a motor vehicle manufacturer must comply with the requirements of the state’s privacy laws in controlling and processing personal data obtained from consumers’ use of a motor vehicle, regardless of the number of consumers from which the motor vehicle manufacturer or affiliate obtains personal data.
In California, an amended AB 566 (opt-out preference signal) passed out of the Assembly Privacy and Consumer Protection Committee.
Finally, the Georgia legislature closed without passing the Georgia Consumer Privacy Protection Act (SB 111).
Turning to children’s privacy bills, a federal district court found Arkansas’ Social Media Safety Act unconstitutional earlier this week. Shortly thereafter, Governor Huckabee Sanders introduced SB 611 to amend the law. The bill was returned by committee with a do pass recommendation on April 3. The governor also introduced SB 612, which creates a private right of action against social media platforms.
In Texas, HB 186 (social media) was amended and reported favorably out of committee.
We also saw one new biometric privacy bill introduced. Minnesota‘s SF 3270 requires places of public accommodation to obtain express consent before collecting biometric data.
Finally, moving to data broker bills, California‘s SB 361 passed out of the Senate Judiciary committee on April 1. The bill amends California’s DELETE Act.
2. AI Bills
Our latest edition of Byte Back AI is now available to subscribers. Subscriptions start as low as $50/month. In this edition, we provide:
- Updates on laws enacted in Virginia and New Jersey, bills advancing out of the legislatures in Arizona, Kansas, North Dakota, and Montana, and bills crossing chambers in Arizona, Maryland, and North Dakota.
- A summary of the California Senate Governmental Organization hearing, which covered three AI-related bills.
- Our special feature this week – an analysis of Kentucky’s SB 4, which was signed into law and regulates the state’s use of AI.
- Our “three things to know this week.”
- An updated state AI bill tracker chart.
Click here for more information on paid subscriptions.
3. Bill Tracker Chart
For more information on all of the privacy bills introduced to date, including links to the bills, bill status, last action, and hearing dates, please see our bill tracker chart.
