Connect with us

Tech

Scope of US state-level privacy laws expands rapidly in 2025 | Computer Weekly

Published

on

Scope of US state-level privacy laws expands rapidly in 2025 | Computer Weekly


The number of individual US states with local data privacy legislation on their statute books has expanded rapidly in 2025, with nine more state laws coming into effect this year and three more states – Indiana, Kentucky and Rhode Island – slated to start enforcing their own rules on 1 January 2026, according to a report compiled by the International Association of Privacy Professionals (IAPP).

Since the introduction of the landmark California Consumer Privacy Act in 2020, politicians in state capitals across the US have eagerly taken up the data protection baton, with Colorado, Connecticut, Utah and Virginia all introducing comprehensive privacy laws in 2023; Montana, Oregon and Texas in 2024; and Delaware, Iowa, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey and Tennessee this year.

A further 16 states are currently deliberating comprehensive privacy bills, including economic powerhouse states such as Massachusetts and New York.

The resulting report captures an in-depth picture of each of the separate state privacy laws, with the overall goal being to outline the contours of each state to offer more meaningful guidance to organisations. The IAPP has been actively tracking amendments to state privacy laws – Connecticut, Montana and Oregon all made changes his year to expand the scope of applicability, enhance consumer rights and put in place more business obligations around control and processing of personal data, for example.

Where to start?

Müge Fazlioglu, IAPP principal researcher, privacy law and policy, has been tracking these developments. She described an increasingly complex patchwork of compliance for organisations working in the US.

“The applicability of each US state privacy law can be assessed through a multistep process as each state law has a unique scope based on variety of thresholds,” she told Computer Weekly. “These thresholds are related to entity’s jurisdiction, revenue, volume of personal data processing and revenue derived from the sale of personal data.”

To dig deeper into the extent to which the laws differ, five different thresholds in the US now exist for processing resident’s personal data. These include no threshold in Nebraska and Texas; 25,000 or more unique consumers in Montana; 35,000 in Connecticut, Delaware, Maryland, New Hampshire and Rhode Island; 100,000 in California, Colorado, Indiana, Iowa, Kentucky, Minnesota, New Jersey, Oregan, Utah and Virginia; and 175,000 in Tennessee. So, any organisation holding data on any Texas residents becomes subject to applicability, but they must hold data on 0.6% of the population of Maryland, or 3.3% of the population of tiny Delaware.

Then there are thresholds for the sale of personal data. Here, again, Nebraska and Texas are strictest, ruling that the control, processing or sale of any personal data is subject to state privacy laws, albeit with exemptions for small businesses. Meanwhile in California, organisations fall in scope if they control or process any personal data and derive 50% or more of their revenues from the sale of data. Colorado and New Jersey both include population thresholds again – 25,000 unique consumers or more, and in-scope organisations derive any revenue or discount on the price of any goods or services from the sale of personal data.

When it comes to exemptions, each of the 19 state laws excludes various entities and types of data held by them – most commonly, government agencies, non-profits and higher education institutions; and organisations already subject to national, sectoral legislation, such as the Health Insurance Portability and Accountability Act (HIPAA).

Differences again abound. For example, the laws of Colorado, Delaware, Minnesota, Montana, New Jersey and Oregon do not exempt non-profits. California and Maryland do exempt non-profits but do not exempt higher education institutions, and so on. Nuances exist even here – Delaware, for example, exempts only some non-profits and its laws don’t apply to those than handle data held by non-profits working with victims of child abuse, domestic violence, human trafficking or sexual assault. Neighbouring Maryland exempts those that process or share personal data to assist first responders in emergency situations, or law enforcement investigating fraud or insurance-related crime.

When it comes to business obligations under state privacy laws, all states require regulated entities to provide consumers with privacy practice disclosure notices – California asks for this at the point of collection, and all bar Rhode Island and Utah impose minimisation and purpose limitations on the collection or processing of data. This typically restricts the collection, use, retention and sharing of consumer data to what is adequate, relevant and reasonably necessary. Most states – bar Iowa and Utah – require data protection impact assessments (DPIAs), but in Delaware, Indiana and Virginia, DPIAs are specifically required for targeted advertising, the sale of personal data or individual profiling.

Naturally, all states require consent for processing of sensitive data, but again they define varying categories of data as sensitive. Most state laws cover a standard dataset that will be familiar to most, classing children’s data, data on ethnic background, religion, and sexual orientation as sensitive. However, some states go further, with Maryland and Oregon also recognising information on national origin as sensitive, while five states – Connecticut, Delaware, Maryland, New Jersey and Oregon – include data that might reveal an individual’s status as non-binary or transgender.

Maryland, meanwhile, has the only state level law that does not classify mental or physical health data as sensitive, whereas California ploughs a unique furrow and classes philosophical beliefs as a protected category, protecting existentialists, logical positivists, nihilists and stoics alike.

Finally, turning to consumer rights to access, correct and delete data held on them, things are a little simpler but there are still differences to account for. In all states consumers can access, correct and delete data – bar Iowa, where they cannot correct it; and Indiana, where they can correct it only if they have provided it in the first place.

Similarities to GDPR

Organisations operating out of the UK or European Union (EU), may be tempted to look to the practices and principles already established under the General Data Protection Regulation (GDPR) as a helpful guide to the growing labyrinth of rules, clauses and exceptions in the US.

However, Fazlioglu said that while the requirements of the various US regimes relating to consumer rights, data minimisation, purpose limitation of data collection and processing, and so on, might feel familiar to organisations that are already GDPR compliant at first glance, data privacy professionals should be wary of inferring too much from this, and it would be a grave error to rely too heavily on them.

“As we know in the world of privacy and digital governance, compliance work requires continuously mapping the current landscape, monitoring the changes, and making necessary updates and adjustments,” she said. “When it comes to the overlap of GDPR and the US state privacy laws, there’s a lot to identify, assess, translate and consider. There’s no simple checklist or formula to confirm alignment … Organisations need to examine the extent of each state privacy law and evaluate whether their existing practices are sufficient.”

Fazlioglu said that understanding the scope and specificity of each law, including the categories of sensitive data or how various terms such as “sale” are defined, is critical.

She said that while this may feel complex and daunting, the interaction between the various laws and domains and the GDPR may ultimately benefit consumers. “It encourages deeper attention to the crossroads of consumer protection and emerging technologies,” she said.

Federal laws a subject of debate

In parallel to the enacting of state-level legislation in the US, calls continue for Washington DC to introduce a federal privacy law. While British and European observers not steeped in US political tradition may naturally feel inclined to prefer a national data protection standard, this is not such a simple ask for the US federal system.

“It is preferable for some and not preferable for others,” said Fazlioglu. “For example, during discussions around the American Privacy Rights Act of 2024 and the American Data Privacy and Protection Act of 2023, we observed different reactions from various groups – some supported these bills to simplify the landscape, while others emphasised the risk of weakening the protections currently offered by state legislatures.”

The IAPP tracks developments in this regard, examining contentious issues such as bipartisanship, private right of action and preemption. Fazlioglu said it was difficult to predict whether or not a federal law could advance through US Congress, but by analysing prior attempts, it is possible to see that laws which include private right of action and preemption clauses can influence a bill’s ability to attract both Democrat and Republican support.

Fazlioglu added: “The  question is not only whether federal privacy legislation is preferable, but also whether such a law should function as a ceiling or a floor. Proponents of preemption argue that a federal law should serve as a ceiling – setting a uniform standard that overrides state laws. In contrast, supporters of preserving state privacy laws believe a federal law should act as a floor – a minimum standard that states can build upon.”

This is why, Fazlioglu said, it’s important to consider both state and federal privacy law developments in order to see the full picture. “I believe the state-federal dynamics influence each other. So, while it’s uncertain whether we’ll see a federal privacy law enacted, I expect continued discussions at both the intra-state level and between state and federal frameworks. Together, these conversations will continue to shape the US approach to privacy law and policy in the coming years,” she said.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

China’s new controls on rare earths create challenges for the West’s plans for green tech

Published

on

China’s new controls on rare earths create challenges for the West’s plans for green tech


Credit: Unsplash/CC0 Public Domain

China recently announced that it was putting new controls on the export of rare earth elements, sparking a new round in the country’s ongoing trade war with the US.

Donald Trump responded by threatening to ramp up tariffs on Chinese goods by a further 100%. This will all be under discussion when China’s president Xi Jinping and Trump meet on October 30 at the Asia Pacific Economic Conference in South Korea.

China has built an effective monopoly over rare earth metals, the 17 metallic elements that are not actually rare but are very difficult to mine and process. Most (EVs), smartphones or depend on these rare earths.

China mines 70% and refines 92% of these increasingly important metals, and manufactures 98% of the world’s rare earth magnets used in EVs, electronics, medical devices and other . In recent years, these essential minerals have become a crucial part of China’s economic agenda as it tries to focus on “high quality development” in advanced and

The recent announcement from Beijing has raised concerns about global access to these essential minerals. If the supply of rare earths available to the outside world diminishes, the cost of manufacturing green tech would rise and drive up prices worldwide. If there is anything that would stall the development of the green economy, this could be it.

In response to the announcement, Trump initially suggested he might cancel an upcoming meeting with Chinese president Xi. However, the meeting now looks set to go ahead, and access to is likely to be high on the agenda.

Trump had also announced that he was considering a ban on exports to China of all products made with US software such as laptops and jet engines, and industrial equipment. This might reduce Beijing’s ability to design essential components for AI chips, hampering its bid for dominance in clean tech.

Prior to Trump’s latest threats, electric vehicles coming from China had already been hit by a 100% US tariff, while import duties for and lithium batteries stood at 50% and 25% respectively.

But the result might have surprised Trump. As US-made goods are exempt from tariffs from paying tariffs, Chinese firms have set up production sites in the US to circumvent Trump’s tariffs. Instead of helping domestic US companies, Trump’s policies have done the opposite.






The battle to gain access to rare earth minerals is important to developing more green tech.

For instance, the solar manufacturing capacity of Chinese firms based in the US has grown so large that it now accounts for 39% of all solar panel energy output in the country versus only 24% from US firms.

But even if Chinese clean tech sales in US were severely affected by the tariffs, most of China’s green tech is heading elsewhere.

Based on my estimations using data from the energy thinktank Ember, Chinese green tech exports globally in 2024 were valued at US$184.06 billion (£139 billion), while total exports to the US stood at US$20.66 billion. The US market accounted for only 11.2% of the total proportion of total Chinese green tech exports, while that number from January to September 2025 has dipped to 7.8%.

Compared to the EU (29.95%) and Asian market (27.97%) in 2024, the US market appears relatively small. So higher tariffs would harm China’s economy, but the damage may not be as substantial as Trump might imagine. However, the EU’s plans to meet climate targets is massively dependent on these Chinese exports.

Problems for Beijing?

The US has already put restrictions on which technologies China can buy from the US. China can still manufacture electric vehicles, solar panels and without US software. But without the most advanced technologies from the US, Chinese firms will have fewer options.

While there are indications that the tech gap between Washington and Beijing may be shrinking, the US still possesses some of the most advanced technologies that are crucial for green tech development. These include advanced semiconductors, which are needed to make AI chips.

Such components and machinery are essential to China’s claim to green leadership since they allow users to automate EVs, solar panels and wind turbines, while ensuring their efficiency and optimizing energy use. Simply put, without the best semiconductors and the AI chips, China won’t be able to create world-leading clean tech.

China may have metals but without US chips and software, its green economic momentum might stall—at least until China’s semiconductor and AI tech catches up with the US. Chinese economic progress and its green leadership may be dependent on gaining better trade deals, even if it does still have a massive advantage.

Provided by
The Conversation


This article is republished from The Conversation under a Creative Commons license. Read the original article.The Conversation

Citation:
China’s new controls on rare earths create challenges for the West’s plans for green tech (2025, October 30)
retrieved 30 October 2025
from https://techxplore.com/news/2025-10-china-rare-earths-west-green.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Tech

Alloys that ‘remember’ their shape can prevent railroad damage

Published

on

Alloys that ‘remember’ their shape can prevent railroad damage


A concrete tie deforming under the weight of rail traffic. The arrow indicates where shape memory alloys were inserted to demonstrate adaptive reinforcement. Credit: University of Illinois Grainger College of Engineering

In railroad tracks, rail ties hold the rails in place and ensure that their separation does not change. Modern concrete ties warp and crack through repeated use, leading to safety concerns including derailment if not regularly maintained.

Research from The Grainger College of Engineering at the University of Illinois Urbana-Champaign shows that damage to concrete ties can be mitigated using (SMAs), metals with the ability to return to their original shape after they are deformed.

In a study led by civil and environmental engineering professor Bassem Andrawes, ties warped by simulated traffic were shown to return to their original state with the help of SMAs activated by induction heating. The paper, “Experimental Testing of Concrete Crossties Prestressed with Shape Memory Alloys,” is published in the Journal of Transportation Engineering, Part A: Systems.

“We’re doing something that I think is unprecedented in rail transportation engineering,” Andrawes said. “We’re working with a commercial supplier of concrete rail ties to implement and test our designs. For our publication, we went beyond laboratory experiments and demonstrated compliance with rail industry standards. We’re very excited to continue our industrial partnership and develop a practical, working design.”

Degradation in concrete is traditionally prevented through the process of prestressing, in which pre-tensioned steel rods are inserted to exert forces which counteract the effects of heavy loads. While this technique is applied in rail ties, the difficulty is that different parts of the tie experience different stresses. In addition, the ties shift as the ballast—the gravel bed distributing weight and providing drainage—settles in response to traffic.

Andrawes believes that SMAs are an ideal solution because they can be inserted into ties then independently controlled with self-contained heat sources. The reinforcement they provide could quickly adapt to the specific circumstances the tie is experiencing at different locations in its structure.

“SMAs are examples of what we call ‘smart materials,'” Andrawes said. “You can deform them, twist them into wild new shapes, but they retain the memory of their original state in the molecular structure. When you apply heat, they know to return to that state. So, if you just have a heat source, then the SMA can guide a back to the desired shape stored in the alloy’s memory.”

Working with Illinois Grainger Engineering civil and environmental engineering graduate student Ernesto Pérez-Claros, Andrawes decided to use induction heating, in which the heat to restore the SMAs to their original shape is provided by a time-varying electromagnetic field. This was done to ensure that the electrical hardware would not need to be inserted inside the tie.

The research proceeded in three phases. First, the researchers worked with Rocla Concrete Tie, Inc., to cast their design in commercially available concrete rail ties. Second, the researchers conducted laboratory experiments to quantify the impacts of different lengths of SMAs in the ties. Finally, ties were subjected to stress tests simulating rail traffic, and the prototypes exceeded the standards of the American Railway Engineering and Maintenance-of-Way Association (AREMA).

“It was important to us that we actually make something that goes out of the lab and into practice,” Andrawes said. “Showing that our design meets and even exceeds AREMA specifications means that it’s not just academic research. This is something that railroads can use, and we intend to guide it to the point where it can be adopted.”

The researchers plan to continue working with Rocla to commercialize the technology. They also plan to submit their prototypes for full testing with real rail traffic at the Federal Railroad Administration Transportation Technology Center in Pueblo, Colorado.

More information:
Ernesto Pérez-Claros et al, Experimental Testing of Concrete Crossties Prestressed with Shape Memory Alloys, Journal of Transportation Engineering, Part A: Systems (2025). DOI: 10.1061/jtepbs.teeng-8982

Citation:
Alloys that ‘remember’ their shape can prevent railroad damage (2025, October 30)
retrieved 30 October 2025
from https://techxplore.com/news/2025-10-alloys-railroad.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Tech

Microsoft prepares to spend more on AI as its sales and profit surge

Published

on

Microsoft prepares to spend more on AI as its sales and profit surge


Mustafa Suleyman, the CEO of Microsoft AI, introduces Mico, short for Microsoft Integrated Companion, the new Microsoft Copilot, a memory-based AI assistant during Microsoft’s Fall 2025 Copilot Sessions event on Wednesday, Oct. 22, 2025, in Los Angeles. Credit: AP Photo/Damian Dovarganes

Microsoft on Wednesday reported its quarterly sales grew 18% to $77.7 billion, beating Wall Street expectations while also surprising some investors with the huge amounts of money it is spending to expand its cloud computing infrastructure and meet demand for artificial intelligence tools.

The said it spent nearly $35 billion in the July-September quarter on capital expenditures to support AI and cloud demand, nearly half of that on computer chips and much of the rest related to real estate.

That overshadowed Microsoft’s report of a 22% increase in to $30.8 billion, or $4.13 per share, which easily beat Wall Street expectations for the period. Microsoft said those results excluded the impacts of money it invested in OpenAI, in an attempt to “help clarify” how those losses affected Microsoft’s core business.

Microsoft was expected to earn $3.67 per share on of $75.38 billion, according to analysts surveyed by FactSet Research.

The results came a day after a new deal with OpenAI pushed Microsoft to $4 trillion in valuation for the second time this year. But shares in Microsoft then dropped in the hours before it disclosed its earnings Wednesday as the company battled an outage affecting its Azure cloud computing platform. They dropped further—by more than 3%—in after-hours trading Wednesday as considered the significance of the earnings report.

Microsoft prepares to spend more on AI as its sales and profit surge
Jacob Andreou, CVP, Product and Growth, Microsoft AI, introduces Mico, short for Microsoft Integrated Companion, the new Microsoft Copilot, a memory-based AI assistant during Microsoft’s Fall 2025 Copilot Sessions event on Wednesday, Oct. 22, 2025, in Los Angeles. Credit: AP Photo/Damian Dovarganes

Driving investor enthusiasm on Tuesday was the announcement of Microsoft’s revised business deal with its longtime partner OpenAI, maker of ChatGPT and now the world’s most valuable startup. While no longer OpenAI’s exclusive cloud provider, a relationship that helped bankroll the startup’s early growth, Microsoft will retain commercial rights to OpenAI products through 2032 and get a roughly 27% stake in OpenAI’s new for-profit arm.

Microsoft also said Wednesday that it has already invested $11.6 billion of the total $13 billion it has committed to OpenAI.

Microsoft’s valuation previously passed $4 trillion in July, making it the second company after Nvidia to reach the milestone. Microsoft again and Apple for the first time crossed $4 trillion this week, while Nvidia went on to achieve a different milestone: the first $5 trillion company.

The sky-high valuations highlight the investor frenzy around artificial intelligence, which some fear could turn into a bust if AI products aren’t as transformative or profitable as promised.

Microsoft prepares to spend more on AI as its sales and profit surge
The logo of Microsoft is seen outside its French headquarters in Issy-les-Moulineaux, outside Paris on May 13, 2024. Credit: AP Photo/Thibault Camus, File

Quarterly revenue from Microsoft’s cloud-focused business segment was $30.9 billion, up 28% from the same time last year and just slightly above what analysts were expecting. Revenue from Microsoft’s workplace software, which includes its email and word processing tools, was up 17% to $33 billion.

Microsoft’s recent focus has centered around pitching its flagship AI assistant Copilot to help with a variety of work tasks, and last week gave it a new animated avatar exterior called Mico.

© 2025 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed without permission.

Citation:
Microsoft prepares to spend more on AI as its sales and profit surge (2025, October 30)
retrieved 30 October 2025
from https://techxplore.com/news/2025-10-microsoft-ai-sales-profit-surge.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Trending