The new year has already seen a flurry of state privacy law activity, with legislators in at least nine states (Indiana, Iowa, Kentucky, Massachusetts, Mississippi, New York, Oklahoma, Oregon, and Tennessee) proposing new comprehensive privacy legislation. Some states’ bills represent efforts continued from past legislative sessions, while others mark new legislative efforts. While it is unlikely that all of these bills will be enacted into law — at least in 2023 — companies already affected by the comprehensive privacy laws passed in California, Colorado, Virginia, Connecticut, and Utah should keep themselves apprised of these new legislative developments in order to anticipate potential future compliance obligations.
