At ECACUSA, we closely monitor not only enacted privacy laws but also proposed legislation that signals where regulation is headed next. Several states continue to advance comprehensive privacy bills that could significantly affect how organizations collect, use, and protect consumer data.
Michigan, New York, North Carolina, and Maine are among the states currently considering new or expanded privacy legislation. While none of these proposals are final, they reflect growing expectations around transparency, consumer rights, and accountability.
Michigan, Expanding Consumer Data Protections
Michigan lawmakers have introduced proposals aimed at establishing comprehensive consumer privacy rights similar to those seen in other states.
These proposals generally focus on:
- Granting consumers rights to access, correct, and delete personal data
- Allowing consumers to opt out of targeted advertising and certain data sharing practices
- Requiring businesses to publish clear privacy notices and maintain reasonable data security practices
If enacted, Michigan’s legislation would add another Midwestern state to the growing list of jurisdictions with broad consumer privacy protections, affecting companies that collect data from Michigan residents.
New York, A More Aggressive Privacy Model
New York has long considered one of the most robust privacy proposals in the country. Current and past legislative efforts emphasize not only consumer rights, but also stronger obligations for businesses.
Proposals in New York often include:
- Expanded consumer rights over personal data
- Higher standards for data minimization and purpose limitation
- Potential fiduciary style duties requiring companies to act in the best interests of consumers
- Broader enforcement authority for the state attorney general
If passed in a strong form, New York’s approach could exceed the requirements seen in many existing state privacy laws and influence national standards.
North Carolina, Aligning with Established Frameworks
North Carolina has explored privacy legislation that mirrors the structure of widely adopted state frameworks. These proposals generally seek to balance consumer protection with business practicality.
Key elements often include:
- Rights to access, correct, delete, and obtain copies of personal data
- Opt out rights for targeted advertising and profiling
- Requirements for reasonable security safeguards and risk assessments
North Carolina’s proposals suggest an effort to align with existing models rather than introduce highly unique or restrictive provisions.
Maine, Building on Existing Privacy Protections
Maine already has a strong history of consumer privacy protections, particularly in telecommunications and broadband. Proposed legislation in Maine aims to expand privacy rights beyond sector specific laws into a more comprehensive consumer data framework.
Proposals often focus on:
- Broader consumer control over personal data
- Clear limits on data sharing and sale
- Transparency obligations for businesses operating in the state
Maine’s efforts indicate a continued emphasis on consumer control and consent.
Why These Proposals Matter for Customer Experience
Even before becoming law, proposed legislation shapes expectations. Customers increasingly expect:
- Clear explanations of how their data is used
- Meaningful control over personalization and profiling
- Responsible handling of sensitive and behavioral data
For organizations focused on customer experience, preparing early reduces risk and builds trust.
What ECACUSA Members Should Do Now
- Monitor legislative developments in these states
- Evaluate whether existing privacy programs would meet likely requirements
- Standardize privacy practices across states where possible
- Align data, AI, and personalization strategies with privacy by design principles
- Prepare operational processes to respond efficiently to consumer data requests
The Bottom Line
Proposed privacy legislation in Michigan, New York, North Carolina, and Maine reflects a continued shift toward stronger consumer data protections across the United States. While timelines and final provisions remain uncertain, the direction is clear. Transparency, accountability, and consumer control are becoming baseline expectations.
At ECACUSA, we encourage members to treat proposed legislation as an early warning system. Organizations that prepare now will be better positioned to adapt quickly, maintain compliance, and deliver customer experiences built on trust as privacy laws continue to evolve.
