Key point: Last week, Oklahoma became the twentieth state to enact a broad consumer data privacy law while Utah’s governor signed two bills into law, and bills advanced out of committees in Connecticut, Kansas, Maryland, New Jersey, and Vermont.

Below is the tenth update on the status of proposed state privacy legislation in 2026. This post covers updates on proposed bills dealing with consumer data privacy, kid’s privacy, biometric privacy, data brokers, and consumer health data privacy. As always, the contents provided below are time-sensitive and subject to change.

What’s New

The big news last week was Oklahoma becoming the twentieth state to enact a broad consumer data privacy law with Governor Kevin Stitt signing SB 546 into law. The Senate had voted to concur in the House amendments earlier in the week. We will be posting an article on Oklahoma’s new law later today.

Meanwhile, Utah Governor Spencer Cox signed a bill to amend the state’s consumer data privacy law to have it apply to motor vehicle manufacturers regardless of the law’s other applicability standards. Amendment bills also advanced out of committees in Connecticut and Maryland.

Turning the kid’s privacy bills, Utah’s App Store amendment bill was signed into law while Kansas’ App Store bill advanced out of House committee after having previously passed the Senate.

A New Jersey Assembly committee advanced a bill that makes it unlawful for a business to use any biometric surveillance system on a consumer at a physical premises unless it fits into an exception.

Meanwhile, 379 miles north, Vermont’s data broker amendment bill passed out of two House committees.

Wisconsin’s legislature closed without passing any of the bills we were tracking.

More details on those bills plus updates on all bill movements last week in the below post.

Consumer Data Privacy

On March 20, Oklahoma Governor Kevin Stitt signed SB 546 into law, making Oklahoma the twentieth state to enact a broad consumer data privacy law.

Utah’s consumer data privacy amendment bill (HB 357) was signed into law. The bill amends Utah’s existing law so that it applies to motor vehicle manufacturers regardless of the law’s applicability thresholds.

In Connecticut, Senator James Maroney’s SB 4 was amended and voted out of the Joint Committee on General Law. The amended version is not yet publicly available.

Maryland’s HB 711 was voted out of committee and amended on second reading. It is now on a third floor reading. The bill amends Maryland’s consumer data privacy law relating to immigration enforcement.

Moving to new bills, Minnesota companion bills SF 4666 and HF 4475 amend Minnesota’s consumer data privacy law to provide that if “a controller sells personal data to third parties, processes personal data for targeted advertising, or engages in profiling in furtherance of decisions that produce legal effects concerning a consumer or similarly significant effects concerning a consumer, the controller’s privacy notice must be clearly and conspicuously titled as a ‘surveillance notice.’”

Kid’s Privacy

Utah’s App Store amendment bill (HB 498) was signed into law. The bill adds requirements for pre-installed applications; modifies App store provider and developer requirements; modifies provisions relating to age-related restrictions and defaults; modifies enforcement and safe harbor provisions; and makes technical and conforming changes.

Kansas’ App Store bill (SB 372) was amended and voted out of a House committee. The bill previously passed the Senate.

Turning to new bills, Louisianna’s HB 977 would repeal and replace last year’s App Store law.

Meanwhile, Minnesota lawmakers are now considering an Age-Appropriate Design Code Act (SF 4574).

Biometric Privacy

New York’s S 2539 was amended while on a third floor reading. The bill requires retailers to post signs warning of the tracking and collecting of customers’ biometric data through electronic devices.

In New Jersey, A 3929 passed out of an Assembly committee. The bill makes it unlawful for a business to use any biometric surveillance system on a consumer at a physical premises unless it fits into an exception.

Data Broker

Vermont’s data broker amendment bill (H 211) passed out of two House committees on March 19. The bill is now eligible for floor votes.

Minnesota lawmakers are considering a new data broker bill (HF 4456).

Consumer Health Data Privacy

A My Health My Data copycat bill was introduced in Michigan (HB 5769).