An Act to protect location privacy

194th Legislature (2025-2026) Introduced by Jim Arciero and 69 co-sponsors

Summary of HD 2965: An Act to Protect Location Privacy Purpose and IntentThe purpose of this bill is to establish stronger protections for personal location data and limit how busi

Senate concurred

Purpose and Intent

The purpose of this bill is to establish stronger protections for personal location data and limit how businesses and government entities can access and use this sensitive information. The bill aims to give individuals more control over their location data and prevent unauthorized tracking or surveillance.

Key Provisions

Consent Requirement: Businesses and government agencies must obtain explicit, affirmative consent from individuals before collecting, accessing, or using their location data.

Strict Data Handling Rules: Organizations handling location data must implement robust security measures, limit data retention, and prohibit the sharing or selling of this information to third parties without user permission.

Location-Based Restrictions: The bill places restrictions on the use of location data for certain purposes, such as employment decisions, insurance eligibility, and targeted advertising.

Individual Rights: The legislation grants consumers the right to access, correct, and delete their location data records held by businesses.

Enforcement and Penalties: Violations of the location privacy protections can result in civil penalties of up to $10,000 per infraction. The state attorney general is empowered to investigate and enforce the law.

Affected Parties

Consumers and Residents: The bill aims to safeguard the location privacy of all individuals within the state, ensuring they have more control over how their sensitive location information is collected and used.

Businesses and Organizations: Companies that rely on location data, such as tech firms, mobile app developers, and data brokers, will need to adapt their data practices to comply with the new consent and data handling requirements.

Government Agencies: Public sector entities that utilize location tracking technologies, such as law enforcement, transportation, and emergency services, will be subject to the same consent and data protection standards as private organizations.

Timeline and Procedure

The bill was introduced in the state legislature on February 27, 2025 and has since passed both the House and Senate. The Senate concurred with the House version of the bill, and it now awaits the governor's signature to become law. Once enacted, businesses and government agencies will have a 6-month grace period to implement the necessary changes to their location data practices before the law takes full effect.