The race to adopt comprehensive consumer data privacy laws in the last five years is showing signs of slowing as bills falter and die, signaling a possible shift in the state privacy landscape.
Lawmakers introduced privacy legislation in 19 states this year, according to tracking by the International Association of Privacy Professionals. But four months into 2025, none have passed and bills in six of those states – Georgia, Hawaii, Mississippi, New Mexico, Washington and West Virginia – have died.
“It feels like the train has slowed down a little bit,” said Matt Schwartz, a policy analyst at Consumer Reports who focuses on privacy. He added that he still has “a lot of optimism about this year and the prospect of passing good legislation.”