The California Senate Bill 1172 would protect the privacy of students’ test data by prohibiting a proctoring business in an educational setting from collecting, retaining, using, or disclosing personal information except from what is reasonably necessary to provide the service.

The bill would authorize a consumer to bring a civil action against a business for violating that provision.

The California Age-Appropriate Design Code Act (AB 2273) would require businesses that create goods or services for children to comply with specified standards, including considering the best interests of children when designing, developing and providing these goods and services.

AB 2273 would also require that such businesses provide their privacy information and policies in a language suitable for the children that would be using their product, while prohibiting them from collecting or using the data from children. It would also establish the California Children's Data Protection Taskforce to evaluate best practices for the implementation of the bill's provisions.

The CPRA’s initial timeline to have it take effect on January 1, 2023, would have regulations finalized by July 1, 2022. However, the California Privacy Protection Agency’s (CPPA) Executive Director Ashkan Soltani has indicated that the rulemaking process will extend beyond the scheduled July 1 deadline. He is estimating the rulemaking process will be completed sometime in Q3 or Q4.

Foreshadowing for this delay was seen last September when the CPPA Board was already discussing potential solutions for a missed deadline. This delay leaves companies in an uncertain position.

They can choose to continue their compliance activities under the presumed final regulations, or wait until the regulations have been set. The former risks having to shift and change once the regulations are finalized, while the latter presents the risk of companies falling behind in updating their compliance activities.

The Florida House has passed House Bill 9, a consumer data privacy bill requiring collectors of consumer data to provide notice to consumers about the collecting, sharing, and selling of data and to provide certain rights and opt-outs.

The most interesting aspect of HB 9, however, is that its tiered private right of action made it through the House vote. HB 9 now moves to the Senate for approval and if passed, will go into effect January 1, 2023.