On January 1, the California Delete Act went into effect establishing new requirements for entities that qualify as “data brokers” under the law. Beginning August 1, covered businesses will need to process deletion requests through the California Privacy Protection Agency’s (CalPrivacy) centralized mechanism — with fines of $200 per day

With state legislatures reconvening for 2026, numerous states are considering privacy and AI bills on a broad range of topics. In the AI space, these bills cover high-risk activities, chatbots, pricing, disclosures, provenance, employment, and health, among other topics. In the privacy space, these bills cover consumer data privacy, teen’s privacy, biometric privacy, consumer health data privacy, and data brokers.

In today’s rapidly evolving digital landscape and expanded threat landscape, financial institutions feel at war and are under increasing pressure to balance innovation, data privacy, and regulatory demands. AI is accelerating that complexity, reshaping how organizations manage sensitive information and comply with a rapidly shifting legal environment.

On December 10, attorneys from Troutman Pepper Locke’s Privacy + Cyber + AI team hosted a webinar providing an overview of existing state AI laws and regulations. To drive understanding and comprehension, the webinar used a use-case-based approach, breaking the laws down across topics, including consumer-facing applications, pricing algorithms, employee-specific

In today’s rapidly evolving digital landscape, AI is transforming how businesses operate. One challenge is the rapidly emerging patchwork of state and local AI laws and regulations. Last year alone, state lawmakers introduced more than 500 bills on various AI topics and issues.

On December 10, from noon to 1

2025 was another incredibly active year in state privacy and AI laws with states enacting numerous new laws and amending existing laws and regulations. Enforcement also picked up speed and intensity. Combined, this activity created an ever-increasing and complex patchwork of requirements and obligations on companies.

On November 6, from