Technology (Consumer Data Protection)

in committee · Pennsylvania · Senate Jul 10, 2026

SB 1396: An Act amending Title 44 (Law and Justice) of the Pennsylvania Consolidated Statutes, in preliminary provisions, providing for public servant data privacy.

This bill establishes a new chapter in Pennsylvania law to protect the personal data of current, former, and retired state officials, including the Governor, Lieutenant Governor, legislators, and judges. It specifically restricts data brokers from selling or sharing protected information such as home addresses, phone numbers, and Social Security numbers for monetary gain. The legislation defines who qualifies as a covered person and clarifies that information is only protected if it is not already publicly available through official government records or media. Additionally, the bill outlines enforcement mechanisms and provides for legal action to be taken by the affected officials or their authorized agents.

Topics ✓ TechnologySupports TechnologyBill explicitly protects personal data privacy by restricting data brokers from selling state officials' information, directly addressing data privacy concerns.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Pennsylvania · House Jun 24, 2026

HB 2666: An Act providing for limitations on the use of user data in the creation of artificial intelligence simulations and for private right of action; and imposing penalties.

This bill, known as the Digital Afterlife Consent and AI Identity Protection Act, restricts digital platforms from using a user's data to create artificial intelligence simulations of them after death or during long periods of inactivity. It requires platforms to obtain explicit, separate consent from users before deploying such simulations and mandates that this consent be revocable at any time or expire two years after the user passes away. Furthermore, the law grants the user's estate the authority to override prior consent, terminate simulations, and request the deletion of AI-generated content, while also requiring clear labels on any content produced by these systems to indicate it is artificial.

Topics ✓ TechnologySupports TechnologyBill protects user data privacy and digital rights by regulating AI use of personal data, preventing unauthorized post-mortem simulations.95% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Data Privacy

Track

in committee · Pennsylvania · Senate Jun 5, 2026

SB 1350: An Act amending the act of December 17, 1968 (P.L.1224, No.387), known as the Unfair Trade Practices and Consumer Protection Law, further providing for definitions and for unlawful acts or practices and exclusions; and providing for conduct relating to reproductive health data and sexual health data.

This bill amends Pennsylvania's Unfair Trade Practices and Consumer Protection Law to specifically regulate how businesses collect and handle reproductive and sexual health data. It requires companies to obtain consumer consent, limit data collection to what is necessary for specific services, and provide clear options for users to access or delete this sensitive information. Additionally, the legislation restricts sharing this data with third parties unless there is valid consent or a legal mandate, while also establishing a process for the Attorney General to issue violation notices before taking enforcement action.

Topics ✓ HealthcareSupports HealthcareBill protects patient privacy rights regarding reproductive and sexual health data, strengthening consumer protection in healthcare.90% confidence ✓ TechnologySupports TechnologyBill strengthens data privacy by regulating reproductive health data collection and requiring consumer consent.90% confidence

Sub-Topics Women's Health Consumer Data Protection Data Privacy

Track

in committee · Pennsylvania · House Mar 13, 2026

HB 2288: An Act amending the act of December 17, 1968 (P.L.1224, No.387), known as the Unfair Trade Practices and Consumer Protection Law, providing for artificial intelligence training disclosure.

This bill requires online platforms in Pennsylvania to inform users when their content may be used to train artificial intelligence systems. It applies to websites and apps that collect user-created content like posts, videos, or images for AI training purposes. The law mandates that platforms must provide a clear, separate disclosure at sign-up and require users to acknowledge receiving this notice before they can post content. The bill defines key terms like "artificial intelligence" and "platform" to ensure consistent application of the disclosure requirement.

Topics ✓ TechnologySupports TechnologyBill enhances consumer protection and data privacy by requiring AI training disclosures, strengthening digital rights and transparency for users.85% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Social Media

Track

passed · Pennsylvania · Senate Jul 1, 2026

SB 1182: An Act amending the act of December 22, 1983 (P.L.306, No.84), known as the Board of Vehicles Act, further providing for title of act; in preliminary provisions, further providing for definitions; and, in vehicles, further providing for license to engage in business, for reimbursement for all parts and service required by the manufacturer or distributor and reimbursement audits, for unlawful acts by manufacturers or distributors and for manufacturer or distributor repurchase of inventory and equipment and providing for consumer data protection.

SB 1182 amends Pennsylvania's Board of Vehicles Act to update definitions and add new requirements for vehicle dealers, manufacturers, and distributors. It requires manufacturers/distributors to reimburse dealers for all parts and service costs mandated by them, includes audit provisions for these reimbursements, and establishes a process for manufacturers/distributors to repurchase dealer inventory or equipment. The bill also adds consumer data protection rules, defining "consumer data" to align with federal standards (15 U.S.C. § 6809) and limiting how third-party "authorized integrators" can access dealer data. These changes directly affect vehicle dealers (who sell new/used cars), manufacturers, and distributors, while protecting consumer data used in dealership operations.

Topics ✓ TechnologySupports TechnologyAdds consumer data protection rules defining 'consumer data', aligning with data privacy policies but embedded within vehicle dealer regulations rather than tech-focused legislation.65% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Pennsylvania · House Feb 12, 2025

HB 596: An Act providing for a requirement for commercial establishments to disclose the use and collection of biometric identifier information and providing for a private cause of action.

HB 596, the Biometric Identifier Signage Act, requires commercial establishments like retail stores, restaurants, and hotels to display clear, plain-language signs at customer entrances if they collect biometric data (such as fingerprints, facial scans, or voiceprints). The bill prohibits businesses from selling, leasing, or profiting from this data and allows customers to sue for violations, with damages ranging from $500 for minor issues to $5,000 for intentional violations, plus attorney fees. It exempts financial institutions and certain video recordings not used for identification. The law takes effect 180 days after passage.

Topics ✓ TechnologySupports TechnologyRequires disclosure of biometric data collection, prohibits sale/profit, and enables private lawsuits for privacy violations, directly protecting consumer data privacy.95% confidence

Sub-Topics Consumer Data Protection

Track

in committee · Pennsylvania · House Oct 27, 2025

HB 1822: An Act amending Title 44 (Law and Justice) of the Pennsylvania Consolidated Statutes, providing for protection of personal data of certain public servants; imposing duties on data brokers regarding personal data; and providing for civil enforcement.

HB 1822 would protect personal data (like home addresses and phone numbers) of Pennsylvania public servants - such as police officers, teachers, and government workers - from being sold or misused by data brokers. It requires data brokers to delete this information upon request and follow new rules when collecting or sharing it. The bill also creates a civil enforcement mechanism, allowing affected individuals to sue companies that violate these protections. Currently, the bill is stalled in the House after being amended and reported by the Judiciary Committee.

Topics ✓ TechnologySupports TechnologyProtects public servants' personal data from misuse by data brokers, imposing new privacy regulations on data brokers per bill summary.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Pennsylvania · House Feb 20, 2025

HB 655: An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in preliminary provisions, providing for student data security.

HB 655 requires Pennsylvania's Department of Education to create and annually update a model data security plan for all public and private schools (including charter and cyber charter schools) to protect student information. The plan must include guidelines for data access, privacy standards, breach response procedures, and data retention policies. School entities must follow this model, and the department will designate a chief data security officer to assist schools with implementation. The bill also mandates a working group to develop initial security measures and report on implementation costs by December 2026. (Based on Section 135 of the Public School Code amendment in HB 655.)

Topics ✓ EducationSupports EducationRequires data security plans to protect student information, directly advancing educational safety and privacy protections under the topic's scope.90% confidence ✓ TechnologySupports TechnologyMandates model data security plan with privacy standards, breach response, and access controls for school data, directly strengthening student data privacy protections.95% confidence

Sub-Topics School Safety Consumer Data Protection Cybersecurity

Track

in committee · Pennsylvania · House Apr 9, 2025

HB 1179: An Act providing for privacy, transparency and compensation regarding the disclosure of information collected by genetic material testing entities.

HB 1179, the Genetic Materials Privacy and Compensation Act, requires genetic testing entities (including medical facilities, genealogy services, and law enforcement) to clearly disclose to individuals what genetic data they collect, how it may be used, and with which third parties it will be shared. The bill mandates "prominent disclosure" in plain language before data collection, prohibiting misleading claims about data privacy or usage. It specifically requires testing entities to obtain explicit consent before sharing genetic material with third parties. The law directly affects individuals using genetic tests and the companies providing those services, focusing on transparency rather than compensation mechanisms.

Topics ✓ Criminal JusticeSupports Criminal JusticeRequires law enforcement to disclose genetic data practices, promoting transparency and protecting privacy rights in criminal investigations.90% confidence ✓ HealthcareSupports HealthcareBill mandates transparency and protection for genetic data collected during healthcare services (medical facilities), directly advancing patient privacy rights in healthcare data handling.95% confidence ✓ TechnologySupports TechnologyMandates clear disclosure and consent for genetic data collection, strengthening consumer data privacy protections under technology policy.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Pennsylvania · House May 8, 2025

HB 1430: An Act amending Title 50 (Mental Health) of the Pennsylvania Consolidated Statutes, providing for protection of minors on social media; and imposing penalties.

HB 1430 would require social media platforms operating in Pennsylvania to protect minors under 16 years old. The bill bans "dark patterns" (deceptive design features that impair user choice) and mandates that platforms allow minors to permanently delete their accounts and personal information so it cannot be retrieved. It also requires platforms to implement a consent process for minors to open accounts. Violations would be subject to penalties under the law.

Topics ✓ TechnologySupports TechnologyBans dark patterns, mandates account deletion for minors, requires consent - directly enhances data privacy protections for minors on social media platforms.95% confidence

Sub-Topics Consumer Data Protection Online Safety Social Media

Track