Key point: The Delaware legislature advanced two bills, Vermont’s consumer data privacy and data broker amendment bills are with the governor, and a bill to amend California’s Invasion of Privacy Act saw movement for the first time in a year.
Below is the 22nd update on the status of proposed state privacy and AI legislation in 2026.
What’s New
It was an unexpectedly busy week for privacy and AI bills.
The Delaware legislature advanced a bill to significantly amend the state’s consumer data privacy law and a bill to prohibit surveillance-based price discrimination.
Vermont’s consumer data privacy bill and data broker amendment bill are now with Governor Phil Scott. According to Representative Monique Priestley, the governor has until the end of the day on June 16 to sign, veto, or let the bills become law without signature.
In Massachusetts, the Senate refused to concur in the consumer data privacy bill as it passed the House and appointed a conference committee.
We saw the first sign of movement this year with SB 690, which amends the California Invasion of Privacy Act. The bill is set for a July 1 hearing in the Assembly Privacy and Consumer Protection Committee.
The Rhode Island legislature was very active last week, advancing bills on sensitive health care information, chatbots, and the use of AI in health care.
Finally, Louisiana’s HB 475 was signed into law. The law requires licensed healthcare professionals to verbally disclose the use of any recording device, software, or service to a patient before recording any part of an appointment or treatment to be transcribed by AI.
More details on those bills, plus updates on all bill movements last week, are included in the post below.
Privacy Updates
Consumer Data Privacy
Delaware’s bill (HB 380) to amend its consumer data privacy law advanced out of a Senate committee and is now set for floor votes.
The Massachusetts Senate refused to concur with the consumer data privacy bill (S 2619) as it passed the House last week and appointed a conference committee. The House has yet to appoint conference committee members.
New Hampshire’s bill (HB 1460) to amend its consumer data privacy law to prohibit the sale of children’s personal data was enrolled.
In Vermont, S 71 was presented to the governor on June 10. According to Representative Monique Priestley, the governor has until the end of the day on June 16 to sign, veto, or let it become law without signature.
Children’s Privacy
The New Jersey Kid’s Code Act companion bills (S 3413 / A 4015) advanced out of committees last week. Ohio’s app store bill (SB 175) was voted out of a Senate committee.
Data Broker
Vermont’s bill (H 211) to amend its data broker law was presented to the governor on June 10. According to Representative Monique Priestley, the governor has until the end of the day on June 16 to sign, veto, or let it become law without signature.
Consumer Health Data Privacy
Rhode Island’s House voted 62-4 to pass the Sensitive Healthcare Information Privacy Act (HB 7357). The bill contains a private right of action.
Other
California’s SB 690 (CIPA amendment) is now set for a July 1 hearing in the Assembly Privacy and Consumer Protection Committee. This is the first movement the bill has seen in a year.
Meanwhile, California’s AB 2561 was read a second time and ordered to a third reading in the Senate. It previously passed the Assembly. The bill prohibits an operating system or an application from undoing a user’s affirmative configuration of a user’s privacy setting without the user’s consent.
AI Updates
Chatbot
Rhode Island’s House passed H 7350.
Pricing
Delaware’s HB 453 was reported out of the House Economic Development / Banking / Insurance & Commerce Committee and is on the ready list. The bill prohibits surveillance-based price discrimination.
Provenance
California’s AB 412 (generative AI: training data: copyrighted materials)was amended and passed out of the Senate Privacy, Digital Technologies, and Consumer Protection Committee.
Health
Louisiana’s HB 475 was signed into law. The law requires licensed healthcare professionals to verbally disclose the use of any recording device, software, or service to a patient before recording any part of an appointment or treatment to be transcribed by AI.
The Rhode Island House and Senate passed the Use of AI by Healthcare Providers Notification Act (HB 7538 / S 2570). The bill requires healthcare providers and healthcare facilities that employ AI to document in-person or telehealth visits to notify patients of the use of AI for that sole purpose and review the AI-generated documentation for accuracy after the visit.
The House also passed the Oversight of Artificial Intelligence Technology in Mental Health Care Act (HB 7349). The bill prohibits licensed professionals and providers from using AI designed to simulate emotional attachment, bonding, or dependency or AI companions for mental health or emotional support, to assist in supplementary support or therapeutic communication in therapy or psychotherapy services where the client’s therapeutic session is recorded or transcribed unless the patient or the patient’s parent, guardian or other legally authorized representative provides informed consent.
Frontier Model
New Jersey lawmakers are considering a new frontier model bill (S 4446).