Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
5300 articles
Browse by Category →
Colorado outlaws AI-generated intimate deepfakes (SB 25-288, eff. Aug. 6, 2025) and election deepfakes (HB 24-1147, eff. July 1, 2024). Learn the statutes, penalties, and victim rights.
Arizona criminalizes deepfake intimate images (ARS 13-1425), AI voice fraud (ARS 13-2006, Class 5 felony), and AI-generated child exploitation material. Election deepfakes carry civil liability under ARS 16-1023.
Arkansas enacted three deepfake laws in 2025: Act 827 criminalizes nonconsensual deepfake sexual images, Act 977 covers AI-generated child exploitation material, and Act 159 protects AI-cloned voices commercially.
Four states (CA, TX, OR, VT) require data brokers to register as of 2026. California's Delete Act and DROP let consumers delete data from every broker at once.
Nevada's consumer health data law (SB 370, NRS ch. 603A) took effect March 31, 2024, bans geofencing within 1,750 feet of clinics, and has no private right of action.
Washington MHMDA duties (ch. 19.373 RCW): separate privacy policy, consent, authorization to sell, geofencing ban, security, plus private-suit litigation risk.
Washington MHMDA (RCW 19.373.040) gives consumers rights to access, withdraw consent, and delete health data, plus a private right of action via the CPA.
Washington's My Health My Data Act (ch. 19.373 RCW) took effect in 2024, has no size threshold, bans health-facility geofencing, and allows private lawsuits.
FDBR compliance under Fla. Stat. 501.701 et seq.: the $1B controller test, privacy notice, opt-in sensitive data, opt-outs, and $50,000 penalties.
Florida Digital Bill of Rights (Fla. Stat. 501.705): access, delete, port, opt out of sale, and opt out of voice and facial recognition collection.
The FDBR (Fla. Stat. 501.701 et seq.) took effect July 1, 2024, with the narrowest controller test in the US: over $1B revenue plus a big-tech prong.
RIDTPPA (R.I. Gen. Laws 6-48.1) compliance: coverage at 35,000 customers, the 6-48.1-3 third-party disclosure, opt-in sensitive data, and AG-only enforcement.