Published:

Updated:

Global Privacy Bill Tracker

General

Photo of author

Donata Stroink-Skillrud

Co-founder and President of Termageddon

List of all global privacy bills being tracked by Termageddon

At Termageddon we’ve have created a privacy bill tracker that will help you better understand what bills are being proposed and how they may affect your business. The privacy bill tracker discloses all bills that have been proposed by lawmakers around the world states that could affect Privacy Policy disclosures and business obligations. We do not include bills that have become law, nor bills that are dead.

Here is a list of the laws that require you to have a Privacy Policy that affect how that Privacy Policy is written. 

This list changes frequently, so be sure to check back to see the latest in privacy.

Table of Contents

U.S. Federal Bill Tracker (2 bills)

United States

Introduced: 2025-11-12

MY DATA Act of 2025 (US HB6043)

To prohibit covered entities from preventing the use of certain data by individuals, and for other purposes.

Does law require Privacy Policy Changes?: No

More Details:

Overrides state laws

Enforced by the FTC

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Introduced: 2026-04-21

National Framework for Consumer Privacy Rights and Enforcement over Data Act (US H 8413)


Does law require Privacy Policy Changes?: No

More Details:

Overrides state laws

Enforced by the FTC

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

U.S. State Bill Tracker (28 bills)

United States

Alaska

Introduced: 2026-02-23

AK – Consumer Personal Information Privacy Act (HB367)

An Act relating to the privacy of consumer personal information; establishing the Consumer Personal Information Privacy Act; establishing data broker registration requirements; relating to social security numbers; making certain violations unfair or deceptive trade practices; and providing for an effective date.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Arizona

Introduced: 2026-02-10

AZ – (SB1815)

Personal data; consumers; controllers; requirements

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Illinois

Introduced: 2025-01-13

IL – Privacy Rights Act (SB52)

Creates the Privacy Rights Act. Sets forth duties and obligations of businesses that collected consumers’ personal information and sensitive personal information to keep such information private. Sets forth consumer rights in relation to the collected personal information and sensitive personal information, including the right to: delete personal information; correct inaccurate personal information; know what personal information is sold or shared and to whom; opt out of the sale or sharing of personal information; limit use and disclosure of sensitive personal information; and no retaliation for exercising any rights. Sets forth enforcement provisions. Creates the Consumer Privacy Fund. Allows the Attorney General to create rules to implement the Act. Establishes the Privacy Protection Agency. Includes provisions regarding remedies and fines for violations of the Act. Makes a conforming change in the State Finance Act.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Illinois

Introduced: 2025-02-06

IL – Illinois Data Privacy and Protection Act (HB3041)

Creates the Illinois Data Privacy and Protection Act. Provides that a covered entity (any entity or any person, other than an individual acting in a non-commercial context, that alone or jointly with others determines the purposes and means of collecting, processing, or transferring covered data) may not collect, process, or transfer covered data unless the collection, processing, or transfer is limited to what is reasonably necessary and proportionate. Provides that a covered entity and a service provider shall establish, implement, and maintain reasonable policies, practices, and procedures concerning the collection, processing, and transferring of covered data. Contains provisions concerning retaliation; transparency; individual data rights; consent; data protection for children and minors; civil rights; data security; small business protections; executive responsibility; service providers and third parties; enforcement; severability; and rulemaking. Effective 180 days after becoming law.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Illinois

Introduced: 2026-01-16

IL – Consumer Data Privacy Act (SB2875)

Creates the Illinois Consumer Data Privacy Act. Applies to legal entities that conduct business in Illinois or produce products or services that are targeted to Illinois residents and that satisfy one or more of the following thresholds: during a calendar year, controls or processes personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or derives over 25% of gross revenue from the sale of personal data and processes or controls personal data of 25,000 consumers or more. “Personal data” means any information that is linked or reasonably linkable to an identified or identifiable natural person but does not include deidentified data or publicly available information. Requires a controller who, alone or jointly with others, to consider the purposes and means of the processing of personal data in protecting the security of consumers while processing personal data and in notifying consumers of a breach of the security of the system. Authorizes rights to consumers under the Act to include, but not be limited to, the right to access their personal data, obtain a list of third parties to whom their data has been disclosed, request corrections to inaccurate data, and question the profiling of their information. Creates an appeal process for a consumer to gather more information on the actions of a covered entity. Exempts the State, a political subdivision of the State, and units of local government, a federally recognized Indian tribe, nonprofits established to prevent insurance fraud, and data already covered by federal law. Authorizes the Attorney General to enforce the Act. Makes definitions. Makes other changes. Limits the concurrent exercise of home rule powers. Contains a severability provision.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Illinois

Introduced: 2026-02-02

IL – Illinois Consumer Data Privacy Act (SB3220)

Creates the Illinois Consumer Data Privacy Act. Establishes certain consumer rights relating to personal data, including the rights to confirm whether data is being processed, to correct any inaccuracies in the consumer's personal data, to delete personal data provided by the consumer, to obtain a copy of the consumer's personal data that was previously provided, and to opt out of targeted advertising, the sale of data, or profiling of the consumer. Defines terms. Applies to persons who conduct business in Illinois or produce products or services that are targeted to Illinois residents and that during a calendar year control or process personal data of at least 100,000 consumers or 25,0000 consumers and derive over 50% of gross revenue from the sale of personal data. Creates requirements for persons or entities that control and process consumer data. Exempts certain persons or entities from the provisions of the Act. Provides that the Attorney General has exclusive authority to enforce the consumer data privacy rights. Creates the Consumer Privacy Fund to be administered by the Office of the Attorney General. Amends the Freedom of Information Act. Exempts from disclosure data protection impact assessments created under the Illinois Consumer Data Privacy Act. Makes a conforming change in the State Finance Act.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Illinois

Introduced: 2026-02-06

IL – Consumer Data Privacy Act (HB5221)

 Creates the Consumer Data Privacy Act. Sets forth provisions concerning agreements between personal data processors and controllers. Provides for consumer personal data rights, including the right to opt out of the processing of personal data concerning the consumer for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of automated decisions that produce legal effects. Sets forth provisions concerning the responsibilities of controllers; requirements for small businesses; and data privacy and protection assessments. Provides for civil penalties. Preempts home rule. Amends the Freedom of Information Act to make a conforming change. Effective January 1, 2027.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Illinois

Introduced: 2026-02-06

IL – Consumer Data Privacy Act (SB3548)

Does law require Privacy Policy Changes?: Yes

Creates the Consumer Data Privacy Act. Establishes certain consumer rights relating to personal data, including the rights to confirm whether data is being processed, to correct any inaccuracies in the consumer’s personal data, to delete personal data provided by the consumer, to obtain a copy of the consumer’s personal data that was previously provided, and to opt out of targeted advertising, the sale of data, or profiling of the consumer. Defines terms. Applies to persons who conduct business in Illinois or produce products or services that are targeted to Illinois residents and that during the a calendar year control or process person data of at least 100,000 consumers or 25,0000 consumers and derives over 50% of gross revenue from the sale of personal data. Makes requirements for persons or entities that control and process consumer data and also exempts certain persons or entities from the statutory provisions of the Act. Provides that the Attorney General has exclusive authority to enforce the consumer data privacy rights. Creates the Consumer Privacy Fund to be administered by the Office of the Attorney General. Amends the Freedom of Information Act. Exempts from disclosure data protection impact assessments done under the Illinois Consumer Data Privacy Act. Makes a conforming change in the State Finance Act.

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Illinois

Introduced: 2026-02-09

IL – Data Privacy Protection Act (SB3890)

 Creates the Illinois Data Privacy Protection Act. Applies to legal entities that conduct business in Illinois or produce products or services that are targeted to Illinois residents and that satisfy one or more of the following thresholds: during a calendar year, controls or processes personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or derives over 25% of gross revenue from the sale of personal data and processes or controls personal data of 25,000 consumers or more.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Massachusetts

Introduced: 2025-02-27

MA – Massachusetts Consumer Data Privacy Act (SB33)

For legislation to establish the comprehensive Massachusetts consumer data privacy act. Advanced Information Technology, the Internet and Cybersecurity.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Massachusetts

Introduced: 2025-12-18

MA – Massachusetts Information Privacy and Security Act (SB301)

Establishing the Massachusetts data privacy act

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Massachusetts

Introduced: 2025-09-25

MA – Massachusetts Data Privacy Act (SB2619/SB2608)

Establishing the Massachusetts data privacy act

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Massachusetts

Introduced: 2025-11-18

MA – Massachusetts Consumer Data Privacy Act (HB4746)

Establishing the Massachusetts data privacy act

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Michigan

Introduced: 2025-06-12

MI – Michigan Personal Data Privacy Act (SB359)

Consumer protection: privacy; personal data privacy act; create. Creates new act.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Minnesota

Introduced: 2026-03-23

MN – Minnesota Consumer Data Privacy (SB4666)

Certain mandatory privacy notices to be titled as surveillance notices requirement provision

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

New York

Introduced: 2025-02-03

NY – Digital Fairness Act (S4276) 

Enacts the “digital fairness act”; requires any entity that conducts business in New York and maintains the personal information of 500 or more individuals to provide meaningful notice about their use of personal information; establishes unlawful discriminatory practices relating to targeted advertising.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

New York

Introduced: 2025-02-20

NY – AB5827

Establishes consumers’ foundational data privacy rights; creates oversight mechanisms; establishes enforcement mechanisms; establishes the privacy and security victims relief fund.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

New York

Introduced: 2025-05-27

NY – New York Data Protection Act (AB974)

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

New York

Introduced: 2023-02-10

NY – New York Privacy Act (AB4947)

Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

New York

Introduced: 2023-02-10

NY – New York Data Protection Act (SB8524)

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

North Carolina

Introduced: 2025-03-19

NC – North Carolina Personal Data Privacy Act (HB462)

Personal Data Privacy/Social Media Safety

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

North Carolina

Introduced: 2025-03-26

NC – North Carolina Consumer Privacy Act (SB757)

Consumer Privacy Act to protect North Carolina residents.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

North Carolina

Introduced: 2026-04-30

NC – North Carolina Consumer Privacy Act (SB1022)

Consumer Privacy Act to protect North Carolina residents.

Does law require Privacy Policy Changes?: Yes

More details:

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Pennsylvania

Introduced: 2025-01-14

PA – Pennsylvania Consumer Data Privacy Act (HB78)

An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.


Does law require Privacy Policy Changes?: Yes

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Pennsylvania

Introduced: 2025-03-24

PA – Pennsylvania Consumer Data Privacy Act (SB112)

An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.


Does law require Privacy Policy Changes?: Yes

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Vermont

Introduced: 2026-01-29

VT – Vermont Duty of Data Loyalty Act (H812)

An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.


Does law require Privacy Policy Changes?: Yes

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Vermont

Introduced: 2025-02-14

VT – Vermont Data Privacy Act (S71)

An act relating to consumer data privacy and online surveillance


Does law require Privacy Policy Changes?: Yes

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

Washington

Introduced: 2026-02-28

WA – HB 1671

Protecting personal data privacy.


Does law require Privacy Policy Changes?: Yes

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United States

West Virginia

Introduced: 2026-02-04

WV – HB 5123

The purpose of this bill is to protect consumer data privacy by establishing a consumer right to request copy of personal data collected; establishing a consumer right to have personal information deleted or corrected; establishing a consumer right to request personal data sold or shared; establishing a consumer right to opt out of the sale or sharing of personal information to third parties; prohibiting discrimination against consumers who exercise their right under this article; establishing procedures for requests for personal information under this article; establish a form to opt out of sale or sharing of personal information; creating a private cause of action; empowering the West Virginia Division of Consumer Protection to establish rules under this article for enforcement; and empowering the West Virginia Division of Consumer Protection to bring suit for violation of this article.


Does law require Privacy Policy Changes?: Yes

Business size limit

Consumers can sue

Right to access data

Right to delete data

Right to correct data

Right to restrict processing

Right to opt-out

Opt-in consent required

Right to portability

Against automated decision making

Imposes fiduciary duty

Prohibits discrimination

Right to be forgotten

VIEW BILL

United Kingdom Privacy Bill Tracker (1 Bill)

United Kingdom

Introduced: 2022-23

United Kingdom Data Protection and Digital Information Bill

A Bill to make provision for the regulation of the processing of information relating to identified or identifiable living individuals; to make provision about services consisting of the use of information to ascertain and verify facts about individuals; to make provision about access to customer data and business data; to make provision about privacy and electronic communications; to make provision about services for the provision of electronic signatures, electronic seals and other trust services; to make provision about the disclosure of information to improve public service delivery; to make provision for the implementation of agreements on sharing information for law enforcement purposes; to make provision about the keeping and maintenance of registers of births and deaths; to make provision about information standards for health and social care; to establish the Information Commission; to make provision about oversight of biometric data; and for connected purposes.

Details:

  • Amends definition of “personal data” 
  • Clarifies “legitimate interests”
  • Reduces need for cookie consent banners; 
  • Amends automated decision-making requirements;
  • Removes the requirement for UK representatives; 
  • Removes requirement to appoint a Data Protection Officer; 
  • Provides the Information Commissioner’s Office with additional enforcement powers; 
  • Increases fines for nuisance calls; 
  • Requires new disclosures to be added to Privacy Policies.
VIEW BILL

Canada Privacy Bill Tracker (1 Bill)

Canada

Introduced: 2023-03-23

Canada Bill C-27

An Act to enact the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act and the Artificial Intelligence and Data Act and to make consequential and related amendments to other Acts

Details:

  • Requires companies to implement and maintain a privacy management program
  • Grants the Privacy Commissioner ability to impose fines 
  • Increases fine amounts for violations
  • Includes a private right of action, allowing consumers to sue businesses directly for privacy violations
  • Includes right of portability
  • Includes right of deletion
  • Requires new disclosures to be added to Privacy Policies
  • Regulates automated decision-making systems
  • Includes a “legitimate interest” exception to consent requirements
VIEW BILL

Australia Privacy Bill Tracker (1 Bill)

Australia

Introduced: 2023-03-23

Australia Privacy Act 1988 reform

The proposed reforms are aimed at strengthening the protection of personal information and the control individuals have over their information. Stronger privacy protections would support digital innovation and enhance Australia’s reputation as a trusted trading partner.

Details:

  • Expands definition of “personal information” 
  • Removes small business exemption
  • Requires new disclosures to be added to Privacy Policies
  • Provides right to withdraw consent
  • Expands right to access
  • Includes right to object to the collection, use or disclosure of personal information
  • Expands the right of correction
  • Includes right to delete
  • Includes right to de-index online search results containing certain personal information
  • Includes right to opt out of targeted advertising
  • Introduces concepts of processor and controller
  • Expands scrutiny of transfers of data outside of Australia
  • Includes lower and mid-tier civil penalty provisions
VIEW BILL


Please note that this chart does not include bills that are dead nor does it include bills that do not deal with the subject matter that pertains to our customers. For example, a bill has been proposed that deals with facial recognition. We have not included this bill in our tracker since it’s not relevant to our customers. 

As the proposed bills are always changing, make sure to check this post often to keep up to date! Or don’t if you’re a Termageddon customer, because we’ll update your policies automatically for you when the bills become law. So you can leave all the tracking and privacy-bill-reading up to us by using our Privacy Policy Generator.

Photo of author
About the Author
Donata Stroink-Skillrud

Donata is the Co-founder and President of Termageddon and a licensed attorney and Certified Information Privacy Professional. She serves as the Vice-Chair of the American Bar Association's ePrivacy Committee and the Chair of the Chicago Chapter of the International Association of Privacy Professionals.

Search the Site
Popular Articles
Browse by Category

Comparing Policy Generators

Cookie Consent Banner

Cookie Policy

Culture

Disclaimer

EULA

How To's

Privacy Policy

Terms of Service

Subscribe for Updates