Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
3308 articles
Browse by Category →
Arkansas enacted three deepfake laws in 2025: Act 827 criminalizes nonconsensual deepfake sexual images, Act 977 covers AI-generated child exploitation material, and Act 159 protects AI-cloned voices commercially.
Four states (CA, TX, OR, VT) require data brokers to register as of 2026. California's Delete Act and DROP let consumers delete data from every broker at once.
Nevada's consumer health data law (SB 370, NRS ch. 603A) took effect March 31, 2024, bans geofencing within 1,750 feet of clinics, and has no private right of action.
Washington MHMDA duties (ch. 19.373 RCW): separate privacy policy, consent, authorization to sell, geofencing ban, security, plus private-suit litigation risk.
Washington MHMDA (RCW 19.373.040) gives consumers rights to access, withdraw consent, and delete health data, plus a private right of action via the CPA.
Washington's My Health My Data Act (ch. 19.373 RCW) took effect in 2024, has no size threshold, bans health-facility geofencing, and allows private lawsuits.
FDBR compliance under Fla. Stat. 501.701 et seq.: the $1B controller test, privacy notice, opt-in sensitive data, opt-outs, and $50,000 penalties.
Florida Digital Bill of Rights (Fla. Stat. 501.705): access, delete, port, opt out of sale, and opt out of voice and facial recognition collection.
The FDBR (Fla. Stat. 501.701 et seq.) took effect July 1, 2024, with the narrowest controller test in the US: over $1B revenue plus a big-tech prong.
RIDTPPA (R.I. Gen. Laws 6-48.1) compliance: coverage at 35,000 customers, the 6-48.1-3 third-party disclosure, opt-in sensitive data, and AG-only enforcement.
Rhode Island's RIDTPPA (6-48.1-5) gives access, correction, deletion, portability, and opt-out rights; controllers must answer within 45 days. AG enforces.
The RIDTPPA (R.I. Gen. Laws 6-48.1) takes effect Jan 1, 2026, with a 35,000-customer threshold, opt-in sensitive data, and a unique third-party disclosure duty.