On April 7, 2024, U.S. Representative Cathy Rodgers and U.S. Senator Maria Cantwell introduced the American Privacy Rights Act 2024 (the Bill), aimed at establishing robust national data privacy standards with a focus on consumer control over personal information. Since its initial release, the Bill has evolved while being reviewed by the House Energy & Commerce Committee (the Updated Draft). In this Insight Q&A article, Billee Elliott McAuliffe and Jacquelyn H. Sicilia, from Lewis Rice LLC, delve into key provisions, limitations, and implications of this proposed legislation. They address frequently asked questions, offering valuable insights into how the Bill could reshape data privacy regulations in the US. This Q&A article has been updated on June 18, 2024, based upon the amendments made by the House Energy & Commerce Committee in the Updated Draft. This Q&A article was further updated on July 12, 2024, based upon the amendments made by the House Energy & Commerce Committee which was introduced as House Bill 8818.

On May 24, 2024, Minnesota adopted the Minnesota Consumer Data Privacy Act (MCDPA), becoming the 19^th state to adopt a comprehensive state privacy law. The MCDPA will go into effect on July 31, 2025, giving businesses more than 12 months to come into compliance with its requirements.

Minnesota is following the lead of many other US states in adopting the MCDPA, taking aspects of a variety of different state privacy laws already in effect. This should provide welcome news to businesses that are already facing an increasingly complex privacy regulatory environment, with new state privacy laws adopted on an almost monthly basis. However, as is relevant for each of the state privacy laws, it is important to recognize the nuances of each law and understand how the particular law applies to your business operations. In this Insight article, Jordan L. Fischer, of Fischer Law, LLC, provides an overview of the key Minnesota law requirements.

Kentucky has joined the growing count of states to enact a comprehensive data privacy law. The law, passed as House Bill 15 and titled the Kentucky Consumer Data Protection Act (KCDPA), was passed by the Kentucky legislature on March 27, 2024, and signed by Governor Andy Beshear on April 4, 2024. The KCDPA comes into effect on January 1, 2026.

The requirements of the KCDPA should look familiar to those who have tracked other US state comprehensive privacy laws. This is no accident: Kentucky legislators stated during the legislative process that the KCDPA was modeled after neighboring Virginia's comprehensive privacy law. In this Insight article, Jonathan Ende, Partner at McDermott Will & Emery, examines the KCDPA and its key requirements.