Tech Law & AI Regulation Curator

US state privacy patchwork acceleration

US state privacy patchwork acceleration

Key Questions

What are the SECURE and GUARD Acts?

The SECURE and GUARD Acts are federal bills introduced by Reps. Guthrie and Hill aimed at preempting over 20 state privacy laws. They include consumer rights to access and delete data, ad opt-outs, and prohibit private lawsuits, limiting enforcement to government action.

What is the Alabama APDPA?

The Alabama Personal Data Privacy Act (APDPA) takes effect in 2027 with applicability thresholds of 25,000 consumers or 25% of revenue from data sales. It includes various exemptions and allows enforcement only by the state Attorney General.

How well do major companies comply with CCPA's Global Privacy Control (GPC) signal?

Compliance is low, with Google ignoring GPC on 86% of 7,000 sites surveyed, Microsoft on 50%, and Meta on 69%. This highlights ongoing challenges in enforcing opt-out signals under California's privacy law.

What is the Google Android settlement about?

Google agreed to a $135 million settlement related to Android location data privacy issues. A hearing on the settlement is scheduled for June 23.

Why are lawmakers pushing for federal preemption of state privacy laws?

Lawmakers, including committee heads, are introducing bills to override state data privacy laws for tech and financial services, seeking uniform national standards. Manufacturers support this for clear guidelines and consumer protections amid a patchwork of over 20 state laws.

Federal SECURE/GUARD Acts push preemption over 20+ states (Guthrie/Hill, access/delete, ad opt-outs, no private suits). Alabama APDPA (2027, 25k/25% thresholds, exemptions, AG-only); CCPA GPC ignores (Google 86%, MS 50%, Meta 69% on 7k sites); Google $135M Android settlement (June 23 hearing).

Sources (3)
Updated Apr 22, 2026