Statewatch is a small team with limited resources and would like to be able to do more. Much of our impactful work is thanks to a vast network of contributors who share their time and expertise with us. Now, we are looking to expand this network to include a few individuals who can offer regular support in writing and publishing social media content. This would help us to better publicise our work and important developments related to human rights, civil liberties, and democratic standards.
About Statewatch
We are activists, researchers, lawyers and journalists exposing state power across Europe and its borders. Our work has supported debates, movements and campaigns since 1991.
Our vision: An open Europe of democracy, civil liberties, personal and political rights, free movement, freedom of information, equality and diversity.
Our mission: To monitor, analyse and expose state activity that threatens civil liberties, human rights and democratic standards in order to inform and enable a culture of diversity, debate and dissent.
About the position
In this role, you will support the Head of Communications with the following.
Populating the editorial calendar
Review team content input
Identify relevant connections between news and Statewatch work
Schedule content accordingly
Writing accessible copy for social media:
Distil news into key points and collect quotes
Draft copy for social media content following editorial guidance
Ensure messaging aligns with Statewatch's mission and messaging guidelines.
Review edits by Head of Communications
Drafting promotional graphics:
Use Canva templates and brand guidelines to draft graphics for social media
Maintain Canva folder organisation
Review edits by Head of Communications
Key results
Regular posts promoting news and research.
Consistent, accessible copy that aligns with Statewatch’s brand voice.
Develop skills related to inclusive and accessible communications.
About you
We are looking for someone who:
Understands basic legal and political language
Is proficient in written communication in the English language
Has an interest in translating complex concepts into accessible and inclusive communications
Benefits:
Gain hands-on experience in accessible communications promoting research and journalism.
Work closely with a dedicated team passionate about civil liberties and human rights.
Make a meaningful contribution to Statewatch's work exposing state power.
Develop valuable skills in communication, research, and advocacy.
Terms
Time commitment: Flexible, 1-3 days per week, including regular check-in with the Head of Communications.
Starting date: Immediately.
Compensation: This is an unpaid volunteer position.
Location: Remote
How to apply:
Please send a CV and a brief statement of interest (no more than 250 words) to comms[at]statewatch.org. We welcome alternative formats if preferred, but we ask that they be similar in length and size to a brief statement (for example, videos of no more than 2 minutes). Applications will be reviewed on a rolling basis.
We’re taking a moment to reflect on the 2024 state legislative session and what it means for the future of digital rights at the state level. Informed by insights from the State of State Technology Policy 2024 report by NYU’s Center on Technology Policy and EFF’s own advocacy work in state legislatures, this blog breaks down the key issues (Privacy, Children’s Online Safety, Artificial Intelligence, Competition, Broadband and Net Neutrality, and Right to Repair), taking a look back at last year’s developments while also offering a preview of the challenges and trends we can expect in state-level tech policy in the years ahead.
To jump ahead to a specific issue, you can click on the hyperlinks below:
Children’s Online Safety and Age Verification
PrivacyState privacy legislation saw notable developments in 2024, with Maryland adopting a stronger privacy law that includes enhanced protections, such as prohibiting targeted advertising to teens, requiring opt-in consent to process health data, and broadening the definition of sensitive data to include location data. This places Maryland’s law ahead of similar measures in other states. In total, seven states—Kentucky, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, and Rhode Island—joined the ranks of states with comprehensive privacy laws last year, regulating the practices of private companies that collect, store, and process personal data. This expands on the 12 states that had already passed similar legislation in previous years (for a total of 19). Additionally, several of the laws passed in previous years went into effect in 2024.
In 2025, states are expected to continue enacting privacy laws based on the flawed Washington Privacy Act model, though states like Maryland have set a new standard. We still believe these bills must be stronger. States will likely also take the lead in pursuing issue-specific privacy laws covering genetic, biometric, location, and health data, filling gaps where federal action is unlikely (or likely to be weakened by business pressure).
Private Right of ActionA key issue in privacy regulation remains the debate over a private right of action (PRA), which is one of EFF’s main recommendations in comprehensive consumer privacy recommendations and would allow individuals to sue companies for privacy violations. Strong enforcement sits at the top of EFF’s recommendations for privacy bills for good reason. A report from the EPIC and the U.S. PIRG Education Fund highlighted that many state privacy laws provide minimal consumer protections largely due to the absence of private rights of action. Without a PRA, companies are often not held accountable for violations unless state or federal regulators take action, which is both slow and inconsistent. This leaves consumers vulnerable and powerless, unable to directly seek recourse for harm done to their privacy. Unless companies face serious consequences for violating our privacy, they’re unlikely to put our privacy ahead of their profits.
While the California Consumer Privacy Act (CCPA) includes a limited PRA in cases of a “personal information security breach” only, it is alarming that no new comprehensive laws passed in 2023 or 2024 included a PRA. This reluctance to support a PRA reveals how businesses resist the kind of accountability that would force them to be more transparent and responsible with consumer data. Vermont’s 2024 comprehensive consumer privacy bill proposed a PRA in their bill language. Unfortunately, that bill was vetoed by Gov. Phil Scott, demonstrating how powerful corporate interests can undermine consumer rights for the sake of their own convenience.
Consumer Privacy and Government RecordsComprehensive consumer privacy legislation outlined above primarily focuses on regulating the practices of private companies that collect, store, and process personal data. However, these laws do not target the handling of personal information by government entities at the state and local levels. Strong legislation is essential for protecting data held by these public agencies, as government records can contain sensitive and comprehensive personal information. For example, local governments may store data on residents’ health records, criminal history, or education. This sensitive data, if mishandled or exposed, can lead to significant privacy breaches. A case in point is when local police departments share facial recognition or ALPR data, raising privacy concerns about unauthorized surveillance and misuse. As tensions rise between federal, state, and local governments, there will be greater focus on data sharing between these entities, increasing the likelihood of the introduction of new laws to protect that data.
A notable example of the need for such legislation is California’s Information Practices Act (IPA) of 1977, which sets privacy guidelines for state agencies. The IPA limits the collection, maintenance, and dissemination of personal information by California state agencies, including sensitive data such as medical records. However, the IPA excludes local governments from these privacy protections, meaning counties and municipalities— which also collect vast amounts of personal data—are not held to the same standards. This gap leaves many individuals without privacy safeguards at the local government level, highlighting the need for stronger and more inclusive privacy legislation that addresses the data practices of both state and local entities–even beyond California.
Right to Delete and DELETE ActData brokers are a major issue when it comes to the irresponsible handling of our personal information. These companies gather vast amounts of personal data and sell it with minimal oversight, often including highly sensitive details like purchasing habits, financial records, social media activity, and precise location tracking. The unregulated trade of this information opens the door to scams, identity theft, and financial exploitation, as individuals become vulnerable to misuse of their private data. This is why EFF supported the California “DELETE Act” in 2023, which allows people to easily and efficiently make one request to delete their personal information held by all data brokers. The law went into effect in 2024, and the deletion mechanism is expected by January 2026—marking a significant step in consumer privacy rights.
Consumers in 19 states have a right to request that companies delete information collected about them, and these states represent the growing trend to expand consumer rights regarding personal data. However, because a “right to delete” that exists in comprehensive privacy laws requires people to file requests with each individual data broker that may have their information, it can be an incredibly time-consuming and tedious process. Because of this, the California Delete Act’s “one-stop shop” is particularly notable in setting a precedent for other states. In fact, Nebraska has already introduced LB602 for the 2025 legislative session, modeled after California's law, further demonstrating the momentum for such legislation. We hope to see more states adopt similar laws, making it easier for consumers to protect their data and enforce their privacy rights.
Issue-specific Privacy LegislationIn 2024, several states passed issue-specific privacy laws addressing concerns around biometric data, genetic privacy, and health information.
Regarding biometric privacy, Maryland, New York, Utah, and Virginia imposed restrictions on the use of biometric identifying technologies by law enforcement, with Maryland specifically limiting facial recognition technology in criminal proceedings to certain high-crime investigations and Utah requiring a court order for any police use of biometrics, unless a public safety threat is present.
Conversely, states like Oklahoma and Florida expanded law enforcement use of biometric data, with Oklahoma mandating biometric data collection from undocumented immigrants, and Florida allocating nearly $12 million to enhance its biometric identification technology for police.
In the realm of genetic information privacy, Alabama and Nebraska joined 11 other states by passing laws that require direct-to-consumer genetic testing companies to disclose their data policies and implement robust security measures. These companies must also obtain consumer consent if they intend to use genetic data for research or sell it to third parties.
Lastly, in response to concerns about the sharing of reproductive health data due to state abortion bans, several states introduced and passed location data privacy and health data privacy legislation, with more anticipated in 2025 due to heightened scrutiny over location data trackers and the evolving federal landscape surrounding reproductive rights and gender affirming care. Among those, nineteen states have enacted shield laws to prohibit sensitive data from being disclosed for out-of-state legal proceedings involving reproductive health activities.
State shield laws vary, but most prevent state officials, including law enforcement and courts, from assisting out-of-state investigations or prosecutions of protected healthcare activities. For example, a state judge may be prohibited from enforcing an out-of-state subpoena for abortion clinic location data, or local police could be barred from aiding the extradition of a doctor facing criminal charges for performing an abortion. In 2023, EFF supported A.B. 352, which extended the protections of California's health care data privacy law to apps such as period trackers. Washington also passed the "My Health, My Data Act" that year, (H.B. 1155), which among other protections, prohibits the collection of health data without consent.
Children’s Online Safety and Age VerificationChildren’s online safety emerged as a key priority for state legislatures in the last few years, with significant variations in approach between states. In 2024, some states adopted age verification laws for both social media platforms and “adult content” sites, while others concentrated on imposing design restrictions on platforms and data privacy protections. For example, California and New York both enacted laws restricting "addictive feeds,” while Florida, Mississippi, and Tennessee enacted new age verification laws to regulate young people’s access to social media and access to “sexual” content online.
None of the three states have implemented their age verification for social media laws, however. Courts blocked Mississippi and Tennessee from enforcing their laws, while Florida Attorney General Ashley Moody, known for aggressive enforcement of controversial laws, has chosen not to enforce the social media age verification part of the bill. She’s also asked the court to pause the lawsuit against the Florida law until the U.S. Supreme Court rules on Texas's age verification law, which only covers the “sexual content” provisions, and does not include the provisions on social media age checks.
In 2025, we hope to see a continued trend to strengthen privacy protections for young people (and adults alike). Unfortunately, we also expect state legislatures to continue refining and expanding age verification and "addictive platform” regulation for social media platforms, as well as so-called “materials harmful to minors,” with ongoing legal challenges shaping the landscape.
Targeted Advertising and ChildrenIn response to the growing concerns over data privacy and advertising, Louisiana banned the practice of targeting of ads to minors. Seven other states also enacted comprehensive privacy laws requiring platforms to obtain explicit consent from minors before collecting or processing their data. Colorado, Maryland, New York, and Virginia went further, extending existing privacy protections with stricter rules on data minimization and requiring impact assessments for heightened risks to children's data.
Artificial Intelligence2024 marked a major milestone in AI regulation, with Colorado becoming the first state to pass what many regard as comprehensive AI legislation. The law requires both developers and deployers of high-risk AI systems to implement impact assessments and risk management frameworks to protect consumers from algorithmic discrimination. Other states, such as Texas, Connecticut, and Virginia, have already begun to follow suit in the 2025 legislative session, and lawmakers in many states are discussing similar bills.
However, not all AI-related legislation has been met with consensus. One of the most controversial has been California’s S.B. 1047, which aimed to regulate AI models that might have "catastrophic" effects. While EFF supported some aspects of the bill—like the creation of a public cloud-computing cluster (CalCompute)—we were concerned that it focused too heavily on speculative, long-term catastrophic outcomes, such as machines going rogue, instead of addressing the immediate, real-world harms posed by AI systems. We believe lawmakers should focus on creating regulations that address actual, present-day risks posed by AI, rather than speculative fears of future catastrophe. After a national debate over the bill, Gov. Newsom vetoed it. Sen. Weiner has already refiled the bill.
States also continued to pass narrower AI laws targeting non-consensual intimate imagery (NCII), child sexual abuse material (CSAM), and political deepfakes during the 2024 legislative session. Given that it was an election year, the debate over the use of AI to manipulate political campaigns also escalated. Fifteen states now require political advertisers to disclose the use of generative AI in ads, with some, like California and Mississippi, going further by banning deceptive uses of AI in political ads. Legal challenges, including one in California, will likely continue to shape the future of AI regulations in political discourse.
More states are expected to introduce and debate comprehensive AI legislation based on Colorado’s model this year, as well as narrower AI bills, especially on issues like NCII deepfakes, and AI-generated CSAM. The legal and regulatory landscape for AI in political ads will continue to evolve, with further lawsuits and potential new legislation expected in 2025.
Lastly, it’s also important to recognize that states and local governments themselves are major technology users. Their procurement and use of emerging technologies, such as AI and facial recognition, is itself a form of tech policy. As such, we can expect states to introduce legislation around the adoption of these technologies by government agencies, likely focusing on setting clear standards and ensuring transparency in how these technologies are deployed.
CompetitionOn the competition front, several states, including New York and California, made efforts to strengthen antitrust laws and tackle monopolistic practices in Big Tech. While progress was slow, New York's Twenty-First Century Antitrust Act aimed to create a stricter antitrust framework, and the California Law Revision Commission’s ongoing review of the Cartwright Act could lead to modernized recommendations in 2025. Delaware also passed SB 296, which amends the state’s antitrust law to allow a private right of action.
Despite the shifts in federal enforcement, bipartisan concerns about the influence of tech companies will likely ensure that state-level antitrust efforts continue to play a critical role in regulating corporate power.
Broadband and Net NeutralityAs federal efforts to regulate broadband and net neutrality have stalled, many states have taken matters into their own hands. California, Washington, Oregon, and Vermont have already passed state-level net neutrality laws aimed at preventing internet service providers (ISPs) from blocking, throttling, or prioritizing certain content or services for financial gain. With the growing frustration over the federal government’s inaction on net neutrality, more states are likely to carry the baton in 2025.
States will continue to play an increasingly critical role in protecting consumers' online freedoms and ensuring that broadband access remains affordable and equitable. This is especially true as more communities push for expanded broadband access and better infrastructure.
Right to RepairAnother key tech issue gaining traction in state legislatures is the Right to Repair. In 2024, California and Minnesota’s Right-to-Repair legislation went into effect, granting consumers the right to repair their electronics and devices independently or through third-party repair services. These laws require manufacturers of devices like smartphones, laptops, and other electronics to provide repair parts, tools, and manuals to consumers and repair shops. Oregon and Colorado also passed similar legislation in 2024.
States will likely continue to pass right-to-repair legislation in 2025, with advocates expecting between 25 to 30 bills to be introduced across the country. These bills will likely expand on existing laws to include more products, from wheelchairs to home appliances and agricultural equipment. As public awareness of the benefits of the Right to Repair grows, legislators will be under increasing pressure to support consumer rights, promote environmental sustainability, and combat planned obsolescence.
Looking Ahead to the Future of State-Level Digital RightsAs we reflect on the 2024 state legislative session and look forward to the challenges and opportunities of 2025, it’s clear that state lawmakers will continue to play a pivotal role in shaping the future of digital rights. From privacy protections to AI regulation, broadband access, and the right to repair, state-level policies are crucial to safeguarding consumer rights, promoting fairness, and fostering innovation.
As we enter the 2025 legislative session, it’s vital that we continue to push for stronger policies that empower consumers and protect their digital rights. The future of digital rights depends on the actions we take today. Whether it’s expanding privacy protections, ensuring fair competition, or passing comprehensive right-to-repair laws, now is the time to push for change.
Join us in holding your state lawmakers accountable and pushing for policies that ensure digital rights for all.
EFF has been at the forefront of defending civil liberties in the digital age, with our activism team working across state, federal, and local levels to safeguard everyone's rights in the rapidly evolving tech landscape. As federal action on technology policy often lags, many are looking to state governments to lead the way in addressing tech-related issues.
Drawing insights from the State of State Technology Policy 2024 report by NYU’s Center on Technology Policy and EFF's own experiences advocating in state legislatures, this blog offers a breakdown on why you should care about state policy, the number of bills passed around the country, and a look forward to the coming challenges and trends in state-level tech policy.
Why Should You Care?State governments are increasingly becoming key players in tech policy, moving much faster than the federal government. This has become especially apparent in 2024, when states enacted significantly more legislation regulating technology than in previous years.
“Why?,” you may ask. State legislatures were the most partisan they’ve been in decades in 2024, where we saw a notable increase in the presence of "trifecta" governments—states where one political party controls both chambers of the legislature and the governorship. With this unified control, states can pass laws more easily and quickly.
Forty states operated under such single-party rule in 2024, the most in at least three decades. Amongst the 40 trifecta states, 29 states also had veto-proof supermajorities, meaning legislation can pass regardless of gubernatorial opposition. This overwhelming single-party control helped push through new tech regulations, with the Center on Technology Policy reporting that 89% percent of all tech-related bills passed in trifecta states. Even with shifts in the 2024 elections, where at least two states—Michigan and Minnesota—lost their trifectas, the trend of state governments driving technology policy is unlikely to slow down anytime soon.
2024 in Numbers: A Historic Year for State Tech PolicyAccording to the State of State Technology Policy 2024 report by NYU’s Center on Technology Policy:
2025 will be a critical year for state tech policy, and we expect to see several trends persist: state governments will continue to prioritize technology policy, leveraging their political compositions to enact new laws faster than the federal government. We expect state legislatures to continue ongoing efforts to regulate AI, online child safety, and other pressing issues, with states taking a proactive role in shaping the future of tech regulation. We also should recognize that states and local governments are technology users, and that their procurement and use of technology itself is a form of tech policy. States are also likely to introduce legislation around the procurement and use of emerging technologies like AI and facial recognition by government agencies, aiming to set clear standards and ensure transparency in their adoption—an issue the EFF plans to monitor and address in more detail in future blog posts and resources. Legislative priorities will be influenced by federal inaction or shifts in policy, as states step in to fill gaps and drive national discussions on digital rights.
Much depends on the direction of federal leadership. Some states may push forward with their own tech regulations. Others may hold off, waiting for federal action. We might also see some states act as a counterbalance to federal efforts, particularly in areas like platform content moderation and data privacy, where the federal government could potentially impose restrictive policies.
For a deep dive on how the major tech issues fared in 2024 and our expectations for 2025, check out our blog post: Key Issues Shaping State-Level Tech Policy.
EFF will continue to be at the forefront, working alongside lawmakers and advocacy partners to ensure that digital rights remain a priority in state legislatures. As state lawmakers take on critical issues like privacy protections and facial recognition technology, we’ll be there to help guide these conversations and promote policies that address real-world harms.
We encourage our supporters to join us in these efforts—your voice and activism are crucial in shaping a future where tech serves the public good, not just corporate interests. To stay informed about ongoing state-level tech policy and to learn how you can get involved, follow EFF’s updates and continue championing digital rights with us.
At EFF, we’re big fans of the Creative Commons project, which makes copyright work in empowering ways for people who want to share their work widely. EFF uses Creative Commons licenses on nearly all of our public communications. To highlight the importance of open licensing as a tool for building a shared culture, we are upgrading the license on our website to the latest version, Creative Commons Attribution 4.0 International.
Open licenses like Creative Commons are an important tool for sharing culture and learning. They allow artists and creators a simple way to encourage widespread, free distribution of their work while keeping just the rights they want for themselves—such as the right to be credited as the work’s author, the right to modify the work, or the right to control commercial uses.
Without tools like Creative Commons, copyright is frequently a roadblock to sharing and preserving culture. Copyright is ubiquitous, applying automatically to most kinds of creative work from the moment they are “fixed in a tangible medium.” Copyright carries draconian penalties unknown in most areas of U.S. law, like “statutory damages” with no proof of harm and the possibility of having to pay the rightsholder’s attorney fees. And it can be hard to learn who owns a copyright in any given work, given that copyrights can last a century or more. All of these make it risky and expensive to share and re-use creative works, or sometimes even to preserve them and make them accessible to future generations.
Open licensing helps culture and learning flourish. With many millions of works now available under Creative Commons licenses, creators and knowledge-seekers have reassurance that these works of culture and learning can be freely shared and built upon without risk.
The current suite of Creative Commons licenses has thoughtful, powerful features. It’s written to work effectively in many countries, using language that can be understood in the context of different copyright laws around the world. It addresses legal regimes other than copyright that can interfere with free re-use of creative materials, like database rights, anti-circumvention laws, and rights of publicity or personality.
And importantly, the 4.0 licenses also make clear that giving credit to the author (something all of the Creative Commons licenses require) can be done in various ways, and that technical failures don't expose users to lawsuits by copyright trolls.
At EFF, we want our work to be seen and shared widely. That’s why we’ve made our content available under Creative Commons licenses for many years. Today, in that spirit, we are updating the license for most materials on our website, www.eff.org, to Creative Commons Attribution 4.0 International.
