On 17 December 2024, the Bipartisan House Task Force on Artificial Intelligence released a report on “guiding principles, forward-looking recommendations, and policy proposals to ensure America continues to lead the world in responsible AI innovation.” The report focuses on 15 key areas, including intellectual property, data privacy, healthcare and federal preemption of state law. These principles, recommendations and policy proposals are meant to be a tool rather than the final word on AI. As such, it is anticipated that future AI legislators will use the report to craft AI policy.

On 18 July 2023, Oregon Governor Tina Kotek signed SB 619 into law as the Oregon Consumer Privacy Act, making Oregon the eleventh US state to enact consumer privacy legislation and the seventh in 2023 alone. The compliance deadline for for-profit entities is 1 July 2024.

The Colorado Privacy Act (CPA) comes into effect on 1 July 2023. Earlier this year, the Colorado Attorney General promulgated final rules for implementing the CPA. The rules provide insight as to how the Attorney General may interpret and enforce the CPA.

On 29 May 2023, Texas’s H.B. 4, also known as the Texas Data Privacy and Security Act, passed in the Texas legislature. The Texas Data Privacy and Security Act joins the growing number of states that have passed or enacted legislation in 2023, including Iowa, Indiana, Tennessee and Montana, and more are expected in the coming months.