State Comprehensive Privacy Law Update – March 21, 2025

As we progress deeper into the 2025 legislative season, comprehensive privacy law proposals continue to progress through the legislative process. In the weeks since our last update, Kentucky amended its comprehensive data privacy law with the passage of HB 473 and Texas introduced a bill (HB 5495) to amend its Data Privacy and Security Act to require controllers to recognize global privacy controls—a meaningful alignment with other states like California, Colorado, and Connecticut. Additionally, Maine introduced a consumer data privacy law (LD 1088/HP 710) after the Senate voted down a House-passed consumer data privacy law last year.

While comprehensive privacy law proposals in Arkansas (SB 258), Georgia (SB 111), and West Virginia (HB 2987) continue to make movement, we anticipate several proposals elsewhere won't make it out of chambers before the end of the legislative session. We've already seen bills in Washington and Hawaii fail to make it out of chambers