Key point: Louisiana becomes the 22nd state to enact broader consumer data privacy law while the New York legislature passes numerous privacy and AI bills before closing for the year.
Below is the 21st update on the status of proposed state privacy and AI legislation in 2026.
What’s New
We have our 22nd state consumer data privacy law. On May 29, 2026, Louisiana Governor Jeff Landry signed the Louisiana Data Privacy Act into law. Louisiana is the third state to enact a law this year, following Oklahoma and Alabama.
In other consumer data privacy bill news, Maryland’s amendment bill became law without the governor’s signature, and the Massachusetts House unanimously passed a bill. According to a House press release, the Massachusetts bill includes a private right of action and contains many measures sought by privacy advocates. The bill now heads back to the Senate for further consideration.
New York’s legislature passed several privacy and AI-related bills before closing for the year, including bills on consumer health data privacy, chatbots, surveillance pricing, and news media content. It also appears (pending confirmation) that a training data transparency bill and synthetic content creation bill passed. Earlier this year, the legislature passed a generative AI disclosure bill that is waiting to be delivered to the governor.
It is worth noting that New York has a unique system in which the governor can wait until December to take action on bills. New York also has a chapter amendment process through which the governor and legislature can agree to changes in a bill.
Colorado also was active last week. Governor Jared Polis signed bills on age attestation, chatbots, and the use of AI in health care into law. He vetoed a surveillance pricing bill.
Finally, the Rhode Island legislature advanced two chatbot bills, an AI in employment bill, and four health care-related AI bills.
More details on those bills plus updates on all bill movements last week in the below post.
Privacy Updates
Consumer Data Privacy
On May 29, 2026, Louisiana Governor Jeff Landry signed the Louisiana Data Privacy Act (SB 386) into law.
The bill (HB 711) to amend Maryland’s consumer data privacy law became law without the governor’s signature.
The Massachusetts House unanimously passed S 2619.
Kid’s Privacy
In Colorado, Governor Polis signed SB 51 (Age Attestation on Computing Devices) into law.
Consumer Health Data Privacy
The New York legislature passed S 9269. The My Health My Data Act copycat bill will next head to Governor Hochul for consideration. Governor Hochul vetoed last year’s consumer health data privacy bill.
AI Updates
Chatbot
Colorado’s HB 1263 was signed into law.
New York’s legislature passed S 9051 (chatbot interactions with minors) and S 9408 / A11144 (temporary prohibition on chatbot toys).
Rhode Island’s H 7350 passed out of committee and was placed on the House calendar. Meanwhile, S 2195, which previously passed the Senate, is now placed on the House calendar.
Pricing
Colorado Governor Polis vetoed HB 1210 (prohibit surveillance price and wage setting).
New York’s legislature passed S 8623 / A 9349 (prohibit use of surveillance pricing).
Disclosures / Provenance
New York’s legislature passed S 6955 / A 6578 (AI Training Data Transparency Act).
Employment
Rhode Island’s S 2499 (AI use and fair employment practices) passed the Senate.
Health
Two bills were signed into law in Colorado. HB 1195 restricts the use of AI in psychotherapy services. HB 1139 requires health insurers and other entities using AI systems for utilization review to ensure those systems base coverage determinations on individual clinical circumstances rather than group data alone, comply with anti-discrimination requirements, and remain subject to periodic review and human oversight, including a prohibition on issuing denials of coverage based solely on AI output without review by a licensed clinician.
Four health care bills advanced in Rhode Island. S 2197 (Oversight of AI Technology in Mental Health Care Act) passed out of a House committee and was placed on the House calendar. The bill previously passed the Senate. HB 7349 (Oversight of AI Technology in Mental Health Care Act) advanced out of House committees and is now on the House calendar. HB 7538 (Use of AI by Healthcare Providers Notification Act) passed out of Senate committees and is now scheduled for floor consideration. That bill previously passed the House. S 2570 (Use of AI by Healthcare Providers Notification Act) passed out of committee and is now scheduled for floor consideration.
Other
The New York legislature passed A 6540 / S 6954. The bill requires synthetic content creations system providers to include provenance data on synthetic content produced or modified by a synthetic content creations system that such provider makes available.
The legislature also passed A 8962 / S 8451 (New York Fundamental AI Requirements in (FAIR) News Act). The bill creates transparency requirements for new media content composed, authored, or otherwise created by generative AI. The bill defines “news media” as “any publication or programming, regardless of the medium or method of distribution, that provides news, weather, traffic, sports, or entertainment reports or programming. This includes but is not limited to newspapers, magazines, journals, periodicals, websites, newsletters, television or cable programming, radio or podcast programming, and internet or satellite-based content.”