HB 1737 makes it illegal to secretly install or place an electronic tracking device on a motor vehicle without the consent of all vehicle owners, specifically to monitor or follow occupants. This directly affects individuals who might secretly track vehicles (e.g., in stalking, unauthorized monitoring, or without owner permission), with penalties including a class A misdemeanor for a first offense or a class E felony for repeat violations. Key exceptions include law enforcement using trackers during investigations, parents monitoring minor children in their vehicle, tracking stolen vehicles or goods, and certain rental companies or insurance programs. The law explicitly excludes vehicle manufacturers and covers specific scenarios like vulnerable adult care or lienholder repossession.
SB 1232 requires Missouri state departments to ensure new information technology purchases and major projects (defined as those exceeding $5 million, spanning multiple departments, or taking over a year to implement) can operate on cloud computing services. Exceptions are permitted only if a department determines that integration with older systems, security risks, or cost concerns prevent cloud compatibility. The bill uses the 2015 federal NIST definition of cloud computing for clarity. It directly affects all state departments making IT investments, mandating cloud capability as the default unless specific exceptions apply.
HB 1913 creates a civil cause of action for individuals whose intimate digital depictions are disclosed without consent. It directly affects people whose realistic digital images - showing private body parts, sexual conduct, or bodily fluids - were created or altered using digital manipulation, especially if shared by the creator who knew consent was lacking. Key provisions require explicit written consent for disclosure (not just creation), allow recovery of actual damages, $150,000 in liquidated damages, or punitive damages, and enable court orders to stop disclosure or maintain anonymity. The law excludes disclosures made by law enforcement, in legal proceedings, or for public interest, and clarifies tech providers aren’t liable for such content.
SB 921 prohibits Missouri public entities (like state agencies or schools) from requiring digital identification for services, mandating they offer physical ID alternatives. It gives individuals control over personal data collected through digital IDs, allowing them to view, correct, delete, or restrict usage, with parental consent required for minors. The bill specifically prohibits linking driver's licenses to license plate readers without written consent and bans selling or transferring personal data without explicit permission. This applies only to government agencies, not private businesses, and establishes a $150,000 penalty for violations.
SB 1183 prohibits creators from distributing "deceptive and fraudulent deepfakes" (AI-generated synthetic media falsely depicting candidates or misleading voters about voting) within 18 weeks of an election. Creators must include clear, visible disclosures (e.g., "This video was generated by AI") for non-deceptive synthetic media, with specific size and duration requirements for visual content. The bill exempts news organizations broadcasting in bona fide newscasts with authenticity disclosures, satire/parody, and platforms hosting user content under federal law. Violations carry penalties ranging from class B misdemeanors to $5 million civil fines for repeat offenses.
HB 2546 creates a Missouri telemarketing no-call list that allows businesses and residential phone subscribers to register their objection to unwanted sales calls and fundraising attempts. The Missouri Attorney General will maintain a free database where subscribers can opt out, requiring telemarketers to check this list before contacting registered numbers. The bill also prohibits call spoofing (misrepresenting caller identity to deceive recipients) during telemarketing. This law aims to reduce unsolicited calls by giving subscribers a clear opt-out method and enforcing compliance through the state database.
HB 2031, the "Children Harmed by AI Technology Act" (or "CHAT Act"), requires companies operating AI chatbots designed to simulate emotional or therapeutic interactions (called "companion AI chatbots") to verify users' ages and implement child safety measures. It directly affects minors under 18 and the companies providing these chatbots in Missouri. Key provisions include mandating age verification for all users, requiring parental consent and a linked parental account for minors, blocking minors' access to sexually explicit or suggestive content, and displaying a clear pop-up notification at the start of every chat and every 60 minutes to confirm users are interacting with AI, not a human. The law also sets requirements for protecting age data confidentiality and outlines enforcement by Missouri's attorney general.
HB 1633 restricts public access to arrest warrant records for certain serious offenses, including Class A/B felonies, dangerous felonies, and crimes against minors under 18. It requires that such records not be available online until the warrant is executed (person arrested) or a prosecutor files a motion showing public safety needs. Exceptions allow immediate access for law enforcement, attorneys, victims, and court personnel. The law also protects officials from liability for following these rules and directs courts to implement technical controls to enforce the changes.
HB 1992 makes it illegal to install, conceal, or place an electronic tracking device on a motor vehicle without the consent of all owners, specifically to monitor occupants. This law directly affects individuals who track vehicles without permission, such as partners, stalkers, or unauthorized third parties. Key exceptions include law enforcement during investigations, parents monitoring minor children in their vehicle, tracking stolen vehicles, and certain insurance or rental company uses. Violations are punishable as a class A misdemeanor for a first offense or a class E felony for repeat offenses, excluding manufacturer-installed tracking systems.
HB 1970 establishes Missouri's "Biometric Information Privacy Act," requiring businesses (private entities) that collect biometric data - such as fingerprints or facial scans - to create public policies for how long they retain and permanently destroy this information. The law mandates specific written consent from individuals for collecting biometric data, limited to purposes like secure access control or tracking work hours without location monitoring. It excludes government agencies, courts, and health-related data (e.g., medical scans under HIPAA) from its scope.
