State Comprehensive Privacy Law Update – February 21, 2025

Many state governments are in the thick of their legislative sessions and we continue to see a steady wave of comprehensive data privacy bills introduced. Most notably last week, Alabama representatives introduced HB 283 after a 3-year hiatus in the efforts to establish a comprehensive privacy law for the state. The bill would establish protections and impose obligations similar to the popular Virginia model (that states such as Colorado, Connecticut, Delaware, Montana, and Oregon also have adopted) and, if passed, would become effective quickly on October 1^st of this year. Some of the newly introduced bills felt familiar: Georgia's SB 111, the Georgia Consumer Privacy Protection Act, was a reintroduced and revised version of last year's SB 473; New York's A 4947, the New York Privacy Act, was introduced as the companion bill to S 3044 (which we profiled in the February 7^th update).