Several US states are currently proposing privacy legislation – most notably New York and Washington State. The New York Privacy Act (Assembly Bill 680)(1) would introduce EU GDPR-style consent requirements, and a private right of action. The Bill, which would apply to those conducting business in the State of New York, or makes products or services that are targeted to residents of New York State, was reintroduced to the New York State Assembly on 6 January.

Senate Bill 567(2), also introduced 6 January in New York State, includes elements from the GDPR and follows closely California’s new statutes, with an added feature being a private right of action.