July may be peak vacation season, but policymakers gave the insights industry little opportunity to relax. The Insights Association tracked and engaged on consequential developments involving privacy and data security, artificial intelligence and HR law, from the defeat of problematic California data-localization legislation to a damaging new data law in New Jersey, federal restrictions affecting children’s data, emerging chatbot requirements and new rules governing non-compete agreements.
Privacy & Data Security
California data localization legislation that would have restricted the maintenance of personal information outside of the U.S. or by foreign governments or entities owned or controlled by them – conflicting with existing federal regulations – died in the legislature.
New Jersey passed a rather devastating new law, immediately imposing a ban on the sale of sensitive data by anyone. It will also set up a new state registry capturing a lot of insights companies (not just traditional “data brokers”) with a graduated scale of (and increasingly exorbitant) registration fee based on the amount of data collected/sold.
Another California bill, supported by the Insights Association to stop abusive California Invasion of Privacy Act (CIPA) lawsuits against insights companies, was recently revived and amended and is advancing in the 2026 legislative session.
At the federal level, the U.S. House of Representatives passed a bipartisan compromise legislative package, the Kids Internet and Digital Safety Act (KIDS Act), adding data broker restrictions and a version of the Children and Teens' Online Privacy Protection Act (COPPA 2.0) that could hurt the insights industry.
Congress is also looking at legislation that would authorize the President to negotiate and enter into digital trade agreements with foreign countries, with a lot of considerations and significant Congressional involvement.
Finally, a recent U.S. Supreme Court ruling regarding the independence of the Federal Trade Commission (FTC) has driven concerns that one of the primary mechanisms for trans-Atlantic data sharing, the EU-U.S. Data Privacy Framework (DPF), is in jeopardy. However, the DPF is still in effect and the threat may be overblown.
Artificial Intelligence
California chatbot legislation, because of broad definitions, would potentially require some insights chatbot providers to either (1) verify ages of all users or (2) apply extensive risk assessments and restrictions on all users. Violations would be subject to private litigation.
Another California bill would add agentic AI to the types of AI systems used or procured by state government entities which the California Department of Technology is supposed to survey, track and evaluate. (The original version of the bill would have shortened the timeline for the DELETE Act, which is why we were tracking it.)
More importantly, a new law, the Idaho Conversational AI Safety Act, requires clarity that consumers are interacting with AI, protocols for responding to suicidal ideation, and a variety of disclosures and controls specifically for minors (and parents of children under 13 years old).
Human Resources
A new law in Viginia prohibits enforcing non-compete agreements in employment contracts if the employer lays off an employee without severance.
Actions You Can Take to Help
IA’s new Action Center, which lets you be the advocate for your industry and business, and only takes a few minutes of your time, has a few more campaigns waiting for YOUR quick action:
Hot Issues, High Stakes
The Insights Association continues to deliver the defense and advocacy that the insights industry needs and deserves, but it can only happen with your membership and sponsorship.
IA remains the ONLY association fighting for you on all these issues (and lots more) across the U.S.
We are always available to answer your questions on these and other legislative/regulatory/legal issues -- just reach out to us.
This information is not intended and should not be construed as or substituted for legal advice. It is provided for informational purposes only. It is advisable to consult with private counsel on the precise scope and interpretation of any laws/regulation/legislation and their impact on your particular business.
About the Author
Based in Washington, DC, Howard is the Insights Association's lobbyist for the marketing research and data analytics industry, focusing primarily on consumer privacy and data security, the Telephone Consumer Protection Act (TCPA), tort reform, and the funding and integrity of the decennial Census and the American Community Survey (ACS).
Howard has more than two decades of public policy experience. Before the Insights Association, he worked in Congress as senior legislative staffer for then-Representatives Christopher Cox (CA-48) and Cliff Stearns (FL-06). He also served more than four years with a science policy think tank, working to improve the understanding of scientific and social research and methodology among journalists and policymakers.
Howard is also co-director of The Census Project, a 900+ member coalition in support of a fair and accurate Census and ACS.
He has also served previously on the Board of Directors for the National Institute for Lobbying and Ethics and and the Association of Government Relations Professionals.
Howard has an MA International Relations from the University of Essex in England and a BA Honors Political Studies from Trent University in Canada, and has obtained the Certified Association Executive (CAE), Professional Lobbying Certificate (PLC) and the Public Policy Certificate (PPC).
When not running advocacy for the Insights Association, Howard enjoys hockey, NFL football, sci-fi and horror movies, playing with his dog, and spending time with family and friends.