Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 04 SEPTEMBER 2025

2025 Mid-Year Review: US State Comprehensive Data Privacy Law Updates (Part 1)

Mayer Brown
Mayer Brown
Contributor
Mayer Brown

Mayer Brown

Mayer Brown is a leading international law firm positioned to represent the world’s major...

View firm profile
Explore more from Mayer Brown

Although 2025 has not seen the introduction of comprehensive federal privacy reform, state legislatures have enacted a series of focused amendments that significantly heighten compliance obligations for organizations processing personal data in the United States.

United StatesPrivacy
Amber Thomson
Amber Thomson
Lei Shen
Lei Shen
Howard W. Waltzman
Howard W. Waltzman
Arsen Kourinian
Arsen Kourinian
Megan P. Von Klein
Megan P. Von Klein
Dara Garcia
Dara Garcia
Author LinkedIn connections

Although 2025 has not seen the introduction of comprehensive federal privacy reform, state legislatures have enacted a series of focused amendments that significantly heighten compliance obligations for organizations processing personal data in the United States. In the absence of comprehensive federal privacy legislation, this proliferation of state-specific requirements highlights the importance of developing multi-faceted compliance programs to address the patchwork of requirements across the United States.

Connecticut, Colorado, Oregon, Montana, Virginia, and Kentucky have each expanded the scope of their privacy frameworks. Specifically, these changes include:

  • Broadening applicability thresholds;

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Visit us at mayerbrown.com

Mayer Brown is a global services provider comprising associated legal practices that are separate entities, including Mayer Brown LLP (Illinois, USA), Mayer Brown International LLP (England & Wales), Mayer Brown (a Hong Kong partnership) and Tauil & Chequer Advogados (a Brazilian law partnership) and non-legal service providers, which provide consultancy services (collectively, the "Mayer Brown Practices"). The Mayer Brown Practices are established in various jurisdictions and may be a legal person or a partnership. PK Wong & Nair LLC ("PKWN") is the constituent Singapore law practice of our licensed joint law venture in Singapore, Mayer Brown PK Wong & Nair Pte. Ltd. Details of the individual Mayer Brown Practices and PKWN can be found in the Legal Notices section of our website. "Mayer Brown" and the Mayer Brown logo are the trademarks of Mayer Brown.

© Copyright 2026. The Mayer Brown Practices. All rights reserved.

This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

DOL Announces Enforcement Actions Against Employers In H-1B And PERM Fraud Probe

The Trump Administration has launched an unprecedented enforcement action suspending permanent labor certification processing for eight major employers, linking immigration sponsorship to layoff histories and recruitment practices. This development signals a fundamental shift in how the government evaluates employer access to H-1B and green card programs, with investigations already underway and subpoenas served.
United StatesEmployment and HR
Mayer Brown
Mayer Brown
Article

Trump Administration Announces New Enforcement Actions Against Employers In H-1B And PERM Fraud Probes

The Trump Administration has launched an unprecedented investigation into H-1B visa and PERM labor certification programs, with the Department of Labor's Office of Inspector General issuing dozens of subpoenas and suspending employers' ability to process applications. Federal agencies are deploying new enforcement tools including whistleblower programs and criminal prosecution threats...
United StatesImmigration
Mayer Brown
Mayer Brown
Article

SEC Staff Statement On Fair Value Measurement And Disclosure Considerations For Private Assets

The SEC Staff has issued new guidance addressing fair value measurement and disclosure practices for private credit and other illiquid assets held by registered funds and business development companies. As private credit portfolios have grown nearly 60% since 2020, reaching $270 billion, regulators emphasize the critical importance of robust valuation methodologies, transparent disclosure of significant judgments, and careful application of accounting standards when market prices are unavailable.
United StatesAccounting and Audit
Mayer Brown
Mayer Brown
Article

Contracting Opportunities And Challenges For Emerging Agentic AI Companies

Emerging providers of AI agents face unique contracting challenges as autonomous AI tools evolve beyond traditional SaaS models. This analysis examines critical issues in defining agent authority, structuring pricing models, calibrating warranties, and navigating regulatory uncertainty. How should providers balance customer expectations with the unpredictable nature of autonomous AI systems?
United StatesMedia, Telecoms, IT, Entertainment
Mayer Brown
Mayer Brown
Article

AI Regulation In Singapore And Hong Kong: A Mid-Year Checkpoint

Singapore and Hong Kong continue to regulate artificial intelligence through existing laws and voluntary frameworks rather than comprehensive AI statutes, but the first half of 2026 has brought sharper emphasis on practical controls including agentic AI governance, assurance and testing, financial-sector oversight and cyber resilience. Both jurisdictions are building concrete expectations around risk management, transparency, human accountability and operational safeguards while avoiding horizontal AI legis
GlobalStrategy
Mayer Brown
Mayer Brown