On March 15, 2023, the Securities and Exchange Commission (SEC) announced proposed amendments (“Proposed Amendments”) to enhance Regulation S-P. Regulation S-P Requires registered broker-dealers, investment companies, and investment advisers to "adopt written policies and procedures that address administrative, technical, and physical safeguards for the protection of customer records and information."

On September 12, 2023 Delaware governor, Govenor John Carney, signed into law the Delaware Personal Data Privacy Act (DPDPA).

On June 16, 2023, the Nevada Governor, Joe Lombardo signed into law the amended version of Senate Bill 370, a health data privacy bill which imposes requirements on the collection, use, and sale of consumer health data. Here’s how to navigate the law:

On May 10, 2023, the Texas Senate approved the Texas Data Privacy and Security Act (HB 4) by a vote of 30-0. The bill was amended by the Senate and will not be sent to the Texas House of Representatives for review, after it passed the earlier version of the bill in April by a vote of 146-0.

On July 18, 2023, Governor Tina Kotek, the governor of Oregon signed Senate Bill 619 (SB 619), also known as the Oregon Consumer Privacy Act (OCPA or Act), into law. The enactment of SB 619 makes Oregon the 12th state in the United States (US) to enact a comprehensive privacy law.

On April 27, 2023, the Washington Governor Jay Inslee signed into law the My Health My Data Act (MHMDA), a privacy framework for handling consumer health data in Washington state, which will take effect on March 31, 2024. A document released by the Office of the Washington Attorney General, notes that MHMDA’s purpose is to “close the gap on health data privacy protections and provide Washingtonians concerned about their reproductive freedom more control of their data.”