Greetings from Portsmouth, New Hampshire! 

It's hard to believe it's been a little over a week since the IAPP Global Privacy Summit 2022 wrapped up. There was lots of news from the event between the keynotes and sessions. If you missed anything, we've got you covered in the digest. Some notable pieces include coverage of Federal Trade Commission Chairperson Lina Khan, Apple CEO Tim Cook and Microsoft President and Vice Chair Brad Smith's keynotes.  

While federal privacy legislation was one issue top of mind at Summit, see the keynotes, privacy legislation at the state level continued to move along. Below is a snapshot of just a few of the state actions that happened during Summit and this week. 

On April 11, Gov. Glenn Youngkin, R-Va., signed three of four amendments that finalize the Virginia Consumer Data Protection Act. The veto of the fourth amendment is curious as he signed the identical companion bill into law. The amendments go into effect July 1, 2022. We'll have more on this you in the upcoming issue of The Privacy Advisor April 26.

State Rep. Daryl Deshotel, R-La., introduced HB 987, comparable to Utah's privacy act. The bill would provide the right of access; consumers would be able to obtain a copy of their data, along with deletions and the ability to opt out of targeted advertising and sale of their data. However, privacy groups, including Consumer Reports and Common Sense Media, expressed concerns that "in its current form it would do little to protect Louisiana consumers’ personal information" and "offers even fewer protections than Virginia’s industry-supported measure, lacking correction rights, opt-in protections for sensitive data, and an opt out of processing for the purposes of profiling."

On April 21, Connecticut Senate voted 35-0 to advance Senate Bill 6, "An act concerning personal data privacy and online monitoring." The bill moves to the House next and, if passed and signed into law, it will become the fifth state to have comprehensive privacy legislation.

On the biometric privacy front, California lawmakers are scheduled to vote on SB 1189, Biometric Information, April 25. Similar to Illinois' Biometric Information Privacy Act, the bill would require written consent from an individual before collecting their biometric information. If passed, it would expand the California Privacy Rights Act regulation of biometric information. It also includes a private right of action.

And, for a brief moment this week, it looked like Maine might pass a biometric law of its own. However, it failed to garner enough votes and died in the senate.

To stay up to date with the latest happenings on the state front, be sure to check out the IAPP's State Privacy Legislation tracker.