Moderate
New law
Signed
California · Oct 14, 2026 · effective Jan 1, 2027
California Governor signs SB 1050 requiring AI synthetic performer disclosures in ads
Governor Gavin Newsom signed SB 1050, a California law that bans publishing advertisements with a synthetic performer unless a clear and conspicuous disclosure is provided. The law defines a synthetic performer as a digital figure, voice…
FTC · FTC Act Section 5
Moderate
New law
Signed
California · Oct 14, 2026
California Governor signs four privacy bills expanding deletion rights, privacy settings, data‑broker rules and limiting CIPA lawsuits
Governor Gavin Newsom signed SB 923, AB 2561, AB 883 and SB 690 into law during the 2026 session. SB 923 broadens CCPA deletion rights and requires online request mechanisms; AB 2561 bars operating systems and apps from changing privacy…
CPPA · California Consumer Privacy Act (as amended by CPRA)
Moderate
Proposed bill
Proposed
United States (federal) · Oct 8, 2026
EPIC urges Congress to ban CBP's use of financial data in predictive policing
EPIC reports that Customs & Border Patrol's Predictive Intelligence Targeting Teams are using financial records and travel data to target individuals without disclosing how the data was obtained. The article cites past ICE bulk subpoenas…
U.S. Customs and Border Protection (CBP) · Right to Financial Privacy Act
Moderate
Proposed bill
Introduced
United States (federal) · Oct 7, 2026
Sen. Gillibrand reintroduces Data Protection Act to create U.S. Data Protection Agency
U.S. Senator Kirsten Gillibrand (D‑NY) has reintroduced the Data Protection Act, which would establish an independent federal Data Protection Agency. The bill aims to limit collection, use and sharing of personal data, oversee high‑risk…
Moderate
New law
Signed
California · Oct 7, 2026
California Governor Signs AB 2246 Replacing Age-Appropriate Design Code Act
On September 10, 2026, the governor of California signed AB 2246. The bill repeals and replaces the California Age-Appropriate Design Code Act, establishing a new framework for online services accessed by children.
CA AG · California Age-Appropriate Design Code Act
Moderate
New law
Signed
California · Oct 6, 2026
California Governor signs over 20 AI‑related bills into law
Governor Gavin Newsom signed more than 20 bills covering AI transparency, synthetic performer disclosures, chatbot labeling, and industry‑specific AI use restrictions. The measures amend the California AI Transparency Act, create new…
California AI Transparency Act
Moderate
New law
Signed
California · Oct 6, 2026
California signs law banning AI tools that assess employee emotions or collect neural data
On September 30, 2026, Governor Gavin Newsom signed legislation that prohibits employers from using AI-powered workplace surveillance to evaluate employees' emotional states or gather neural data. The law creates new restrictions on…
Moderate
New law
Signed
California · Oct 2, 2026
California Governor signs three AI employment laws
Governor Gavin Newsom signed SB 947, SB 951, and AB 1883 to regulate AI in employment. The laws restrict automated decision systems, require technology-related layoff notices, and limit workplace surveillance tools. Each law includes civil…
California Labor Commissioner · SB 947 (No Robo Bosses Act)
Moderate
Proposed bill
Introduced
United States (federal) · Sep 30, 2026
Senator Markey Introduces Facial Recognition and Biometric Technology Moratorium Act of 2026
Senators Markey and Merkley, together with Representatives Jaypal, Pressley, and Tlaib, introduced legislation to halt federal use of biometric surveillance, including facial recognition. The Facial Recognition and Biometric Technology…
Moderate
Proposed bill
Proposed
United States (federal) · Sep 28, 2026
U.S. lawmakers introduce AI AGENT Act and California SB 1106 defining AI agents
This summer U.S. lawmakers released two of the first legislative proposals for regulating AI agents: the federal AI AGENT Act and California SB 1106. The AI AGENT Act would establish a consumer‑facing framework based on the agent’s…
CPPA · California Consumer Privacy Act (as amended by CPRA)
Moderate
Proposed bill
Proposed
United States (federal) · Sep 24, 2026
State bills propose exemption for biometric data converted to irreversible mathematical representations
Several U.S. state privacy bills are introducing a new exception that excludes biometric data once it is transformed into an irreversible mathematical representation that cannot be used to recreate the original measurement. The proposed…
Illinois Biometric Information Privacy Act
Moderate
New law
Signed
California · Sep 23, 2026
California SB 1119 signed into law regulating AI chatbots for minors
The Future of Privacy Forum report notes that California’s SB 1119 was recently signed into law by Governor Newsom. The law targets chatbot interactions with minors, requiring disclosures, crisis‑response protocols, age assurance, parental…
SB 1119
Moderate
Proposed bill
Passed
California · Sep 15, 2026
California legislature passes three AI employment bills pending Governor's signature
The California State Legislature approved SB 947, SB 951, and AB 1883, which impose restrictions on automated decision systems, require technology displacement notices under Cal/WARN, and limit workplace surveillance tools. Each bill would…
California Labor Commissioner · SB 947 (No Robo Bosses Act)
Moderate
Proposed bill
Announced
European Union · Sep 14, 2026
EU Commission to propose EU-wide minimum age for social media, linked to Digital Fairness Act
The European Commission will release a legislative proposal by the end of 2026 establishing an EU-wide minimum age for social media, building on the Special Panel's age‑tiered framework. The proposal may be incorporated into the Digital…
European Commission · Digital Services Act
Moderate
Proposed bill
Passed
California · Sep 14, 2026 · effective Jan 1, 2027
California Legislature passes SB 690 to limit pen register lawsuits under CIPA
On August 28, 2026 the California Legislature passed SB 690, a bill that would eliminate private lawsuits for website-based pen register claims under the California Invasion of Privacy Act. The bill would restrict such claims to actions…
California Attorney General · California Invasion of Privacy Act (CIPA)
Moderate
New law
Signed
California · Sep 10, 2026
California AB 1709, a ban on social media for under‑16, signed into law
AB 1709 was signed into law by Governor Gavin Newsom. The law imposes a functional ban on social media use for people under the age of 16 and requires age‑verification. Critics say the ban will increase data collection and limit free…
AB 1709
Moderate
Proposed bill
Passed one chamber
California · Aug 31, 2026
California Assembly Bill 1709 passed, bans social media recommendation features for users under 16
The California legislature passed Assembly Bill 1709, which would prohibit platforms from providing recommendation algorithms and related features to users under 16. The bill would require age‑verification methods that could involve…
AB 1709
Moderate
New law
In effect
United States (federal) · Aug 31, 2026
Five US states enact location privacy laws banning sale of precise geolocation data
Connecticut, Maryland, New Jersey, Oregon, and Virginia have enacted new consumer privacy statutes that prohibit the sale of precise geolocation data. The laws vary in their consent and minimization requirements, but all share a ban on…
MD AG · Maryland Online Data Privacy Act
Moderate
New law
Signed
New Jersey · Aug 18, 2026 · effective Aug 1, 2027
New Jersey Governor signs Fair Price Protection Act prohibiting surveillance pricing of groceries
On July 23, Governor Mikie Sherrill signed the Fair Price Protection Act (FPPA) (A4085/4523), which bans surveillance pricing for groceries and other foodstuffs. The law takes effect on August 1, 2027, includes a one‑year moratorium on new…
New Jersey Attorney General · FTC Act Section 5
Moderate
New law
Signed
Colorado · Aug 17, 2026 · effective Jan 1, 2027
Colorado governor signs SB 26-189, revising AI Act to regulate ADMT in employment
On May 14, 2026, Colorado Governor signed SB 26-189, repealing and replacing the 2024 Artificial Intelligence Act. The new law, effective January 1, 2027, targets automated decision‑making technology (ADMT) that materially influences…
DE DOJ · Delaware Personal Data Privacy Act
