Technology (Data Privacy)

in committee · Michigan · House Dec 16, 2025

HB 5357: Communications: internet; age-appropriate design code act; create. Creates new act.

HB 5357, the "Age-Appropriate Design Code Act," requires businesses meeting specific thresholds (e.g., $25 million+ annual revenue or handling data of 50,000+ consumers) to design online services, products, or features accessed by known minors (under 18) with privacy and safety as defaults. It prohibits "dark patterns" that manipulate user choices, bans collecting precise geolocation data without consent, and mandates age-appropriate settings for minors. The law applies to businesses operating in Michigan that process personal information of minors, creating civil penalties for violations. It establishes a fund to support enforcement and defines key terms like "known minor" and "business" to clarify compliance requirements.

Topics ✓ TechnologySupports TechnologyRequires privacy/safety defaults for minors' online services, prohibits manipulative 'dark patterns', bans unauthorized geolocation tracking per consumer privacy protections.92% confidence

Sub-Topics Data Privacy Online Safety Social Media

Track

passed · Michigan · Senate Apr 29, 2026

SB 760: Trade: business regulation; availability of companion chatbots to minors; prohibit. Creates new act.

SB 760, the "Leading Ethical AI Development for Kids Act," prohibits operators of companion chatbots from making these AI systems available to minors (under 18) if they could encourage self-harm, unsafe behavior, or harmful interactions like sexual content. The bill specifically bans chatbots that simulate emotional relationships by retaining personal data, asking unsolicited emotional questions, or prioritizing user validation over safety. Operators face $25,000 fines per violation and can be sued by harmed minors or their guardians for damages. This applies to business-owned chatbots designed for ongoing emotional engagement - not customer service or internal tools - and takes effect in 2027.

Topics ✓ HealthcareSupports HealthcareBill prohibits AI chatbots that could cause self-harm in minors, directly protecting mental health safety - a core healthcare concern.95% confidence ✓ TechnologySupports TechnologyRegulates AI chatbots to prevent harm to minors, aligning with consumer protection and data privacy safeguards for ethical tech use.90% confidence

Sub-Topics Artificial Intelligence Data Privacy Social Media

Track

in committee · Michigan · House Dec 10, 2025

HB 5201: Health: abortion; abortion reporting requirements; provide for. Amends 1978 PA 368 (MCL 333.1101 - 333.25211) by adding sec. 2835. TIE BAR WITH: HB 5202'25

HB 5201 requires healthcare professionals performing abortions in Michigan to submit detailed, anonymized reports to the state health department within 7 days. The reports must include specific data points like patient age, gestation period, reason for the abortion (e.g., health risks, rape, economic factors), facility details, and medical method, but exclude all personal identifiers. Strict confidentiality rules prohibit disclosing any information that could identify individuals or facilities, with reports destroyed after 5 years and only aggregated statistical data published annually. This policy applies directly to abortion providers and the state health department, focusing solely on data collection for public health monitoring, not individual records or enforcement.

Topics ✓ TechnologySupports TechnologyBill mandates anonymized reporting and strict confidentiality for health data, directly protecting data privacy - a core technology policy area.95% confidence

Sub-Topics Data Privacy

Track

in committee · Michigan · House Mar 12, 2025

HB 4196: State: identification cards; cross reference to 1972 PA 22; update. Amends sec. 5 of 2008 PA 23 (MCL 28.305). TIE BAR WITH: HB 4194'25

HB 4196 amends Michigan's Enhanced Driver License and ID Card Act (MCL 28.305) to update how personal information is handled for applicants. It specifies that facial images and signatures collected for these IDs may only be shared with law enforcement agencies, other states (as required by federal law), or with an individual's written consent, while prohibiting disclosure of Social Security numbers on the card itself. The bill also clarifies retention rules for facial images (1 year unless fraud is suspected) and strengthens privacy protections by restricting disclosure of sensitive documents. This directly affects Michigan residents applying for enhanced driver licenses or official state ID cards, ensuring their biometric data and personal information are used only under defined, limited circumstances.

Topics ✓ Criminal JusticeSupports Criminal JusticeRestricts law enforcement access to facial images without consent, protecting civil rights related to data privacy in ID systems.75% confidence ✓ TechnologySupports TechnologyRestricts data sharing to law enforcement/consent, prohibits SSN on IDs, enhances privacy protections per bill's explicit language on personal information handling.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

passed · Michigan · Senate Aug 26, 2025

SB 360: Consumer protection: identity theft; identity theft protection act; modify. Amends ses. 3, 12 & 12b of 2004 PA 452 (MCL 445.63 et seq.); adds secs. 11a, 11b, 20, 20a, 20b & 20c & repeals secs. 15 & 17 of 2004 PA 452 (MCL 445.75 & 445.77).

Senate Bill 360 amends Michigan's existing Identity Theft Protection Act. The bill revises and expands several key definitions, including what constitutes a "breach of the security of a database" and various types of "personal information" and "personal identifying information." These updates clarify the scope of protected data and the circumstances under which a security breach occurs, directly affecting Michigan residents and entities that handle their personal information. Additionally, the bill introduces new sections and repeals others, indicating a comprehensive update to the act's provisions.

Topics ✓ TechnologySupports TechnologyAmends identity theft law to clarify data breach definitions and expand protected personal information, strengthening data privacy protections.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Michigan · Senate Feb 11, 2026

SB 549: Insurance: other; data security enforcement; modify. Amends secs. 553, 561 & 563 of 1956 PA 218 (MCL 500.553 et seq.) & adds secs. 564 & 564a.

SB 549 amends Michigan's Insurance Code to strengthen data security requirements for insurers handling personal information. It requires insurers to notify Michigan residents if their unencrypted personal data (like Social Security numbers or financial account details) was accessed by unauthorized parties, or if encrypted data was accessed with the encryption key. The law also mandates that insurers notify data owners if a breach affects information they own but the insurer maintains. These notifications must be provided without unreasonable delay after determining the breach could cause substantial harm or identity theft. The bill directly affects Michigan residents whose data is held by insurers and the insurers themselves, who must now follow specific breach notification protocols.

Topics ✓ TechnologySupports TechnologyStrengthens insurer data security requirements, mandates breach notifications for personal information, enhancing data privacy protections.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Michigan · House Mar 18, 2025

HB 4237: Local government: other; procedures to limit foreign influence in local contracting; establish. Creates new act. TIE BAR WITH: HB 4236'25

HB 4237 prohibits Michigan local governments (like cities, counties, and school districts) from awarding or renewing contracts that give contractors access to personal data if the contractor is a "controlled entity" tied to specific foreign countries of concern (China, Russia, Iran, North Korea, Cuba, Venezuela, or Syria). It requires contractors to submit sworn affidavits confirming they are not controlled entities, with violations subject to fines up to twice the contract value or a 5-year contract ban. The bill also restricts local governments from using information technology or services designed, developed, or supplied by companies owned by those foreign countries, aligning with federal security lists. These rules take effect July 1, 2026, for contract renewals and extensions.

Topics ✓ TechnologySupports TechnologyProhibits local contracts with foreign-controlled entities accessing personal data, strengthening data privacy protections per bill's focus on restricting foreign data access.95% confidence

Sub-Topics Data Privacy

Track

in committee · Michigan · Senate Jun 12, 2025

SB 359: Consumer protection: privacy; personal data privacy act; create. Creates new act.

SB 359 creates Michigan's "Personal Data Privacy Act," giving residents (consumers) new rights over their personal data collected by businesses. It requires companies to clearly disclose data practices, implement a universal "opt-out" for data sharing, and register as data brokers if selling consumer information. The law specifically prohibits deceptive practices like "dark patterns" and protects sensitive data including health information (such as gender-affirming or reproductive care) and precise location data. Businesses must follow new standards for handling data, with civil penalties for violations.

Topics ✓ TechnologySupports TechnologyCreates new consumer data privacy rights, mandates transparency, prohibits deceptive 'dark patterns', and protects sensitive health data - directly strengthens consumer privacy protections in technology.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Michigan · House Mar 18, 2025

HB 4236: State management: purchasing; procedures to limit foreign influence in state contracting; establish. Amends secs. 113, 114, 241, 241c & 261 of 1984 PA 431 (MCL 18.1113 et seq.) & adds sec. 272.

HB 4236 amends Michigan's state contracting rules to limit foreign influence in projects involving personal data. It directly affects state contractors working on facilities (like buildings or infrastructure) where personal identifying information is handled. The bill requires contractors to provide a sworn affidavit confirming they are not "controlled entities" tied to specific foreign governments (including China, Russia, Iran, and others). Starting July 1, 2025, the state cannot renew or extend such contracts without this verification.

Topics ✓ TechnologySupports TechnologyRequires contractors handling personal data to confirm no foreign ties, directly protecting data privacy and cybersecurity by preventing foreign influence in state contracts.95% confidence

Sub-Topics Data Privacy

Track

passed · Michigan · Senate Feb 3, 2026

SB 351: Consumer protection: marketing and advertising; telephone solicitation act; create. Creates new act. TIE BAR WITH: SB 0352'25, SB 0353'25, SB 0354'25, SB 0355'25

SB 351 would create a new law governing telephone marketing calls and solicitations. It has been introduced by Senator Mary Cavanagh and referred to the Finance, Insurance, and Consumer Protection Committee. The bill's specific provisions (such as required disclosures, opt-out mechanisms, or enforcement details) are not described in the provided context. As a procedural bill establishing a new regulatory framework, it directly affects businesses making phone solicitations and consumers receiving such calls. Details about its concrete policy changes remain unavailable based on the current information.

Topics ✓ TechnologySupports TechnologyRegulates telephone solicitation with opt-out mechanisms, aligning with consumer data privacy protections in technology policy.85% confidence

Sub-Topics Data Privacy

Track