Beginning 10/1/2026, prohibits the ownership, operation, or management of a digital financial asset transaction kiosk that accepts United States currency from a customer in exchange for a digital financial asset. (CD1)
SB 1038 clarifies privacy definitions by adding a specific term for "specified data element" and broadening the definition of "personal information." This bill directly affects businesses, organizations, and government entities that collect or handle personal data, as it changes how such data must be categorized. The key change is updating these definitions to include more specific data types, which would impact how entities comply with privacy requirements. The bill is scheduled to take effect on July 1, 3000, after passing committee review with amendments.
HB 1954 updates the state's identity theft law to explicitly include fraudulent impersonation using artificial intelligence or materially deceptive media (like deepfakes) as a form of identity theft. This directly affects victims of AI-generated scams or fake media used to steal identities or commit fraud. The key provision adds these specific methods to the legal definition of identity theft offenses, making them punishable under existing laws. The bill is currently in committee review after its introduction on January 23, 2026.
Requires operators of AI companions in the State to issue certain disclosures to users. Requires operators to develop certain protocols to respond to user prompts regarding suicidal ideation or self-harm. Establishes protections for users and minor users of AI companions. Beginning 1/1/2028, requires operators to submit annual reports to the Behavioral Health Administration of the Department of Health containing certain information. Establishes that violations are to be considered unfair or deceptive acts or practices. (CD1)
Codifies net neutrality principles by prohibiting fixed and mobile internet service providers that provide broadband internet access service from engaging in certain practices concerning the treatment of internet traffic. Among other things, prohibits internet service providers from blocking internet traffic on the basis of internet content, application, or service, engaging in paid prioritization or zero-rating internet traffic in exchange for consideration, monetary or otherwise.
Prohibits the sale of geolocation information and internet browser information without consent. Prohibits the sale of data collected through eavesdropping or through an application operating in the background of a device that uses the device's microphone.
HB 2607 protects individuals' right to publicity by prohibiting the unauthorized use of a person's likeness or voice in AI-generated deepfakes. The bill directly affects people whose image, voice, or persona could be replicated without consent through artificial intelligence. Its key provision bans creating or distributing AI-generated content that mimics a person's identity for commercial or public purposes without permission. This creates a clear legal barrier against non-consensual deepfake exploitation, focusing on preventing harm rather than regulating AI technology broadly.
Prohibits the sale of geolocation information and internet browser information without consent. Prohibits the sale of data collected through eavesdropping or through an application operating in the background of a device that uses the device's microphone. Establishes exemptions for lawful investigations conducted by law enforcement agencies, customer proprietary network information, and certain telecommunication carriers. Effective 1/1/2077. (SD2)
Prohibits the collection, sale, or disclosure of any driver data that is obtained by a motor vehicle or other connected car service, feature, or application to any third-party without the explicit consent of the owner or lessee of the vehicle. Designates exemptions. Requires any disclosure notification for any data collection to be clear and conspicuous. Effective 7/1/2050. (SD1)
Prohibits law enforcement agencies and law enforcement officers from using biometric surveillance technology in the State unless certain conditions are met.