Archive
This is the archived privacy bill tracker changelog for the MARK37.COM US Privacy Bill Tracker. Entries in this privacy bill tracker changelog are 30+ days old and have been moved here from the main page to keep it readable. The most recent privacy bill tracker changelog entries are always on the main tracker.
For reference on active federal and state privacy legislation, see the IAPP US State Privacy Legislation Tracker and Congress.gov privacy legislation search.
June 23, 2026
- New section added: AI Companion Chatbots & Therapy Bot Laws — covering enacted laws in California, New York, Oregon, Washington, Illinois, Nevada, Colorado, and Vermont, plus pending bills in Maine, Missouri, and Nebraska, and related litigation against AI chatbot companies.
- KIDS Act (HR 7757) — Guthrie and Pallone announced bipartisan agreement (Jun 22), consolidating 14 child safety bills. App Store Accountability Act, Don’t Sell Kids’ Data Act, and Sammy’s Law remain separate.
- Vermont — comprehensive privacy law signed June 16, 2026; moved from pending to enacted.
- Georgia SB 111 — moved from pending table to enacted (signed May 11, 2026). State count updated to 25.
- Connecticut SB 4 — signed May 27, 2026.
- Connecticut SB 5 — correction: actual citation is Public Act 26-15, not 26-65.
- Illinois SB 315 — correction: passed legislature May 27, 2026, not June 1.
- Hawaii SB 3001 — correction: AI Disclosure and Safety Act (AI companion chatbots, minor self-harm protocols), not a “geolocation” bill.
- Colorado SB 51 — correction: enacted (last action Jun 3, 2026), not pending a House floor vote.
- Colorado Privacy Act — added June 2025 amendment adding precise geolocation to sensitive data definition.
- Maine LD 2082 — correction: signed April 13, 2026, not “sent to Governor.”
- Illinois HB 1806 — correction: enacted August 4, 2025, not just “2025.”
- Arkansas HB 1717 — new entry; note that Arkansas has no comprehensive adult privacy law.
- Sammy’s Law (HR 2657) — new federal entry, previously missing.
- Florida v. OpenAI — new litigation entry (filed Jun 1, 2026).
- Michigan Kids Code Act, North Carolina SB 1022 — new pending entries.
- Missing links added — California CAADCA, Colorado biometric amendments (HB 24-1130), Louisiana app store law, Nevada AB 406, Colorado HB 26-1195, Pennsylvania v. Character.AI, Texas AG investigation, Maine LD 2082, Missouri HB 2372, Nebraska LB 525, Kentucky v. Character Technologies, 44 State AGs Joint Warning Letters, FTC Safety Report Orders, Florida v. OpenAI.
- Kentucky v. Character Technologies — correction: filed January 8, 2026, not just “January 2026.”
June 10, 2026
- KIDS Act (HR 7757) — New federal entry added. Passed full House Energy and Commerce Committee March 6, 2026. Omnibus children’s safety package. 44 state AGs filed opposition letter May 26, 2026.
- GUARD Financial Data Act (HR 8398) — Promoted from footnote to standalone entry in new Financial Privacy section.
- American Leadership in AI Act (HR 8516) — New federal AI entry added. Introduced April 27, 2026.
- Great American AI Act (GAAIA) — New entry added. Discussion draft released June 4, 2026 by Obernolte/Trahan. Would preempt state AI laws for 3 years.
- Virginia SB 338 — Added to Virginia’s state entry. Signed April 13, 2026; bans sale of precise geolocation data effective July 1, 2026.
- Vermont comprehensive privacy bill — New entry added. Passed legislature May 2026; awaiting Governor Scott (veto risk).
- Vermont S 71 — Description updated to clarify it adds California Delete Act-style single opt-out mechanism.
- Illinois SB 340 — New entry added. Comprehensive privacy bill with Maryland-style data minimization; passed Senate 54-3 and legislature May 31, 2026; awaiting Governor Pritzker.
- Delaware HB 380 — Status updated. Passed full House (30-9) May 2026; now pending Senate committee.
- SECURE Data Act (HR 8413) — House Subcommittee on Commerce, Manufacturing, and Trade held a formal hearing June 3, 2026. Coalition of 44 state AGs filed letter opposing preemption provisions June 2. Companion bill GUARD Financial Data Act (HR 8398) added to tracker.
- Louisiana Data Privacy Act (SB 386) — Signed into law by Governor Jeff Landry on May 29, 2026 as Act No. 502. Status updated from “awaiting signature” to enacted. Louisiana is the 22nd state with a comprehensive privacy law.
- Georgia — Major correction: previously listed as “session closed without passing.” Governor Brian Kemp signed SB 111 (Georgia Consumer Privacy Protection Act) on May 11, 2026. Georgia is now the 23rd state. Also signed SB 540 (chatbot disclosure law) same month. Both added to tracker.
- Connecticut SB 4 — Signed into law as Public Act 26-64. Status updated from “awaiting Governor” to enacted. Effective October 1, 2026. Adds data broker registration, geolocation sale ban, facial recognition protections, and surveillance pricing rules.
- Connecticut SB 5 — New entry added. Signed into law as Public Act 26-65 alongside SB 4. Covers AI companion chatbots and employment AI disclosure requirements.
- Colorado AI Act (SB 26-189) — Signed into law by Governor Polis on May 14, 2026. Status updated from “awaiting signature” to enacted. Replaces original SB 24-205 with narrower transparency-based framework. Effective January 1, 2027.
- Illinois SB 315 — Passed legislature June 1, 2026. Governor Pritzker indicated he will sign. Status updated; joins California and New York as states with a frontier AI model safety bill.
- Vermont S 71 — Conference committee report adopted by both chambers. Awaiting Governor’s signature. Status updated.
- New York Safe by Design Act — Confirmed signed by Governor Hochul as part of FY 2027 budget. Status updated to enacted in New York section.
- TAKE IT DOWN Act — Signed date corrected to May 19, 2025. Platform compliance deadline (May 19, 2026) noted as now passed — full enforcement in effect.
- Texas TDPSA — Corrected vague “major tech company” reference. Now correctly identifies two separate record-setting settlements: $1.4B against Meta (July 2024, biometrics) and $1.375B against Google (May 2025, geolocation/biometric data).
- Illinois BIPA — BNSF $228M corrected from “settlement” to “jury verdict.” Meta/Facebook $650M correctly attributed to Facebook (2020 settlement).
- AI Preemption Moratorium (10-year) — Corrected: entry previously said “Passed House, Pending Senate” — the moratorium was actually stripped from the final One Big Beautiful Bill before Senate passage. President Trump signed the bill July 4, 2025 WITHOUT the moratorium. States remain free to regulate AI. Entry updated to reflect this. Status changed to 🔴.
- Texas SB 2420 (App Store Accountability Act) — New entry added. Fifth Circuit lifted injunction on June 4, 2026 via stay pending appeal; Apple and Google activated enforcement same day — first time in US history a new app store account in any state requires identity verification before downloading apps. Utah SB 142, Louisiana app store law also added. Alabama description corrected (Utah was actually first, not Alabama).
May 28, 2026 — Initial Publication
May 28, 2026 — Initial publication. This privacy bill tracker changelog began when the tracker launched, covering federal bills, 22 state comprehensive laws, biometric laws, health data laws, data broker laws, children’s privacy laws, AI/automated decision-making laws, pending state bills, breach notification laws, and international laws.
Sources: IAPP US State & Federal Privacy Legislation Trackers · Troutman Pepper Privacy + Cyber + AI weekly state updates · DLA Piper Privacy Matters · Hunton Privacy Blog · WilmerHale Privacy Blog · Lexology · MultiState.us · Congress.gov · Secure Privacy · Last updated July 14, 2026.
Privacy legislation moves fast. Verify current status with primary sources before relying on any specific bill for compliance purposes.