Key point: Vermont becomes the 23rd state to enact a comprehensive consumer privacy law, Delaware’s amendment bill clears the legislature, and nine California AI bills advance.
This is the 23rd update on the status of proposed state privacy and AI legislation in 2026.
What’s New
The big news last week was Vermont becoming the 23rd state to enact a broad consumer data privacy law when Governor Phil Scott signed S 71 into law. You can read our analysis of the new law here. Governor Scott also signed H 211 into law, which amends the state’s existing data broker registration law. The governor also signed HB 816 (use of AI in mental health services) into law.
In other news, Delaware is on the cusp of enacting a significant amendment to its consumer data privacy law. The bill passed the legislature last week and will move next to the governor for consideration.
Massachusetts’ consumer data privacy bill is headed for a conference committee. Both chambers have now appointed conference committee members.
In AI bill news, Arizona’s legislature passed a chatbot bill before adjourning for the year, while Pennsylvania’s House passed a bill requiring the disclosure of AI-generated content. Finally, nine California AI bills advanced last week.
The post below covers those bills in more detail, along with every other bill movement from last week.
Privacy Updates
Consumer Data Privacy
Delaware’s bill (HB 380), which amends its consumer data privacy law, passed the legislature.
In Massachusetts, the House insisted on its amendment to S 2619 and appointed a conference committee. Last week, the Senate refused to concur in that amendment and appointed its own conference committee.
In Vermont, Governor Phil Scott signed S 71 into law. You can read our analysis of the new law here.
Data Broker
Vermont Governor Phil Scott signedH 211 into law, amending the state’s data broker registration law.
AI Updates
Chatbot
Arizona’s legislature passed a chatbot bill (HB 2311) before adjourning for the year.
In California, SB 867 (toys: companion chatbots) passed out of the Assembly Privacy and Consumer Protection committee and was re-referred to the Appropriations committee. AB 2023 (companion chatbots: children’s safety) passed out of the Senate Privacy, Digital Technologies and Consumer Protection committee and was re-referred to the Judiciary committee. SB 1119 (companion chatbots: children’s safety) passed out of the Assembly Judiciary committee and was re-referred to the Privacy and Consumer Protection committee.
Provenance
California’s SB 1000 (California AI Transparency Act amendments) passed out of the Assembly Privacy and Consumer Protection committee and was re-referred to the Appropriations committee. Meanwhile, AB 2713 (California AI Transparency Act: system provenance data) passed out of committee, was read a second time, and ordered to a third reading on the Senate floor.
Disclosure
The Pennsylvania House passed HB 95 (disclosure of AI-generated content), which allows for a private right of action.
Health
In Vermont, HB 816 (use of AI in mental health services) was signed into law.
California’s SB 903 (mental health professionals: AI) passed out of the Assembly Business and Professions committee and was re-referred to the Privacy and Consumer Protection committee. SB 1146 (advertisement claims: health-related consumer products and services: digital replicas and synthetic performers) passed out of the Assembly Privacy and Consumer Protection committee and was re-referred to the Judiciary committee. AB 2575 (health care services: AI) passed out of the Senate Health committee and was re-referred to the Labor, Public Employment and Retirement committee. AB 1979 (health care services: AI) passed out of the Senate Privacy, Digital Technologies, and Consumer Protection committee and was re-referred to the Health committee.