Since our
February 20, 2019 report on privacy bills moving through
state legislatures around the country, four new bills modeled on
the California Consumer Privacy Act (CCPA) have been
introduced—in Connecticut, New York, Pennsylvania and
Texas—and many of the previously described bills have moved
further along in the legislative process. Washington's Privacy
Act, which previously seemed likely to be the first state enactment
to follow in the CCPA's wake, failed to make it out of the
state house before the end of the legislative session.
Three new bills—one in Illinois addressing the handling of
geolocation information; one in Louisiana that would prohibit
online service providers from disclosing consumers' personal
information without their express consent; and one in Nevada that
would require online service providers to give consumers the
opportunity to opt out of the sale of their personal
information—have also begun to move forward. More