Indiana Gov. Eric Holcomb on May 1 signed into law Senate Bill 5, making Indiana the seventh state to enact a comprehensive consumer data privacy law, following California, Virginia, Colorado, Utah, Connecticut, and Iowa. The law will take effect Jan. 1, 2026.
Posts published in “State & Local Regulation”
Kansas Gov. Laura Kelly has approved enactment of Senate Bill 44 which requires certain financial institutions to establish information security standards consistent with the federal Gramm-Leach-Bliley Act’s Safeguards Rule, 16 C.F.R. § 314.1, et seq. The Kansas Financial Institutions Information Security Act becomes effective July 1, 2023.
The Texas House of Representatives on April 4 voted unanimously in favor of Texas House Bill 4, the Texas Data Privacy and Security Act. The Texas legislature remains in session through May 29, so there is ample time for the legislation to continue its course.
Iowa Gov. Kim Reynolds on March 28 signed into law SF 262, making Iowa the sixth state to enact comprehensive consumer data privacy legislation. The other states are California, Virginia, Colorado, Utah, and Connecticut. The law will take effect Jan. 1, 2025.
Utah Gov. Spencer Cox on March 23 signed into law Senate Bill 127, which amends the state’s data breach notification statutes. The amendments go into effect May 2, 2023.
March 15 was the deadline for the New York State Department of Financial Services to publish its proposed amendments to its debt collection rule. It didn’t and so they have expired. While the latest version of the proposed amendments has expired, you can bet on DFS releasing an updated version in the coming months.
The New York Department of Financial Services and the New York City Department of Consumer and Worker Protection are simultaneously engaged in amending their consumer debt collection rules. While the DFS rulemaking has been underway for nearly two years, the DCWP began its efforts last fall.
Last year saw an influx of federal and state regulation aimed at what information must be conveyed to consumers in anticipation of the provision of medical services as well as restrictions on the collection of medical debt. Expect more activity in 2023.
Just a few years ago, the annual review would primarily encompass federal activity. But a shift began in 2018, and by the close of this year, it’s clear there is far more state activity impacting consumer debt collection.
Over the past year, the ebb and flow of bankruptcy filings has been an interesting one. Through 11 months, the number of bankruptcy filings have decreased from 2021, which were at their lowest levels since the 1980s.
The upward trend in data privacy legislation continued in 2022. According to the National Conference of State Legislatures, “[a]t least 35 states and the District of Columbia in 2022 introduced or considered almost 200 consumer privacy bills,” which is a significant increase from 160 bills in 2021.
Legislation introduced in the New Jersey Assembly and Senate would prohibit “health care providers” from furnishing information concerning medical debt to credit reporting agencies.