State Comprehensive Privacy Law Update – May 2, 2025

As we approach the end of many states' legislative sessions, we're seeing more action in committees and fewer introductions of new proposals. There are no new comprehensive privacy law proposals to cover since our last update two weeks ago. However, some state legislatures appear to be focused on pushing bills through the chambers before sessions come to a close. We especially have our eye on Alabama's HB 283, which was unanimously passed by state House representatives and now has until May 15 to pass in the Senate. The introduction of HB 283 came in the wake of a 3-year break from comprehensive privacy proposal introductions in Alabama. It is similar to the business-friendly Virginia model and would impose requirements related to data protection assessments for high-risk data processing activities, consent for the processing of sensitive data, and a 60-day cure period from the state AG. We are also closely tracking Oklahoma's SB 546, which has already passed out of