State Comprehensive Privacy Law Update – March 21, 2023

The state comprehensive privacy law legislative process has officially kicked into high gear. Of course, the primary development since our last update is Iowa's passage of SF 262, which positions Iowa to become the sixth state to enact a comprehensive privacy law (joining California, Colorado, Virginia, Utah, and Connecticut). You can read our analysis of that bill here.

SF 262's passage is far from the only development to report, however. Three additional bills cleared a legislative chamber in the last two weeks — the Oklahoma Computer Data Privacy Act (HB 1030), Kentucky's SB 15, and New Hampshire's SB 255. With that, there are now seven bills (besides SF 262) that have already passed a chamber this legislative session: the aforementioned Kentucky, Oklahoma, and New Hampshire bills, plus Hawaii's Consumer Data Protection Act (SB 974), Montana's Consumer Data Privacy Act (SB 384), Indiana Senate Bill 5, and New Jersey S. 332.