The enactment in June 2018 of California’s sweeping new privacy law, the California Consumer Privacy Act, has both increased momentum for enactment of a general federal privacy law and spurred state legislatures to consider privacy bills of their own. A series of widely publicized incidents involving major technology companies’ data handling practices and the coming into force of the European Union’s General Data Protection Regulation have increased the urgency of both efforts. This report reviews proposals at the state level for privacy legislation. A prior report reviewed proposals at the federal level.

WilmerHale’s Cybersecurity and Privacy Practice will continue to track and provide periodic reports on the development of state privacy legislation over the course of 2019.