TLDR:
- Vermont Governor vetoed the Vermont Data Privacy Act due to concerns with private right of action and age-appropriate design code
- Colorado amended the Colorado Privacy Act to impose new requirements over biometric data
In recent legal developments, the Texas Attorney General launched a data privacy team dedicated to enforcing privacy laws in Texas. Additionally, New York Governor signed a Child Privacy Protection Act into law, restricting social media platforms from providing addictive content to users under 18 without parental consent. The SEC issued new compliance guidance related to cybersecurity incidents, and Arkansas Attorney General filed a lawsuit against a Chinese online marketplace company for data privacy violations. In international laws, NOYB filed complaints against Meta in 11 EU countries for privacy policy violations, and CNIL published new guidance on AI system development.