Michigan
Privacy Law Status
Comprehensive Privacy Law
Michigan does not currently have a comprehensive data privacy law in effect[1][2]. While several other states like California, Virginia, Colorado, and Texas have enacted consumer privacy legislation, Michigan residents do not yet have broad statutory privacy rights regarding how businesses collect, use, and share their personal information.
Michigan does have some limited privacy protections through the Michigan Identity Theft Protection Act, which requires data breach notifications, and the Internet Privacy Protection Act, which protects employees and students from being forced to share social media passwords[2][3]. However, these laws do not provide the comprehensive consumer privacy rights found in other states.
Legislative Activity
Michigan lawmakers have made multiple attempts to pass comprehensive privacy legislation. Senate Bill 359, the “Personal Data Privacy Act,” was introduced in June 2025 and was passed out of the Senate Committee on Finance, Insurance, and Consumer Protection on June 12, 2025. It was then referred to the Committee of the Whole for further consideration[4][5]. This bill would establish consumer privacy rights similar to those in other states, including rights to access, delete, and control personal information.
Previous efforts include Senate Bill 659, which passed the Michigan Senate in December 2024 but failed to advance through the House before the legislative session ended[6][7]. The Republican takeover of the Michigan House following the 2024 election has created uncertainty about the prospects for privacy legislation, as the previous Democratic trifecta that supported these measures no longer exists[8][9].
Implementation Timeline
If Senate Bill 359 were to pass, it would take effect one year after enactment[5]. However, the bill’s future remains uncertain due to the shift in political control of the Michigan House of Representatives to Republican leadership, which has historically been less supportive of comprehensive privacy regulations.
The U.S. Chamber of Commerce and other business groups have opposed the legislation, arguing it would create compliance burdens and diverge from privacy frameworks adopted by other states[10]. Given these political and legislative realities, Michigan residents may continue to lack comprehensive privacy protections for the foreseeable future.
Your Rights as a Michigan Resident
Currently, Michigan residents have very limited statutory privacy rights compared to residents of other states with comprehensive privacy laws.
- Right to know what data is collected: No general right exists, though some sector-specific laws like HIPAA provide limited protections for health information
- Right to delete personal information: Not available under Michigan law, except in limited circumstances under federal laws or specific industry regulations
- Right to opt out of data sales: No such right currently exists in Michigan
- Right to correct inaccurate data: Available only for specific types of information under federal laws like the Fair Credit Reporting Act
- Right to non-discrimination: Limited protections exist under the Michigan Identity Theft Protection Act for identity theft victims, but no general privacy-based non-discrimination rights
If Senate Bill 359 becomes law, Michigan residents would gain comprehensive privacy rights similar to those available in states like Virginia and Colorado.
Business Requirements
Under current Michigan law, businesses have limited privacy-related obligations beyond federal requirements and sector-specific regulations.
- Which companies must comply: Currently, only businesses subject to the Michigan Identity Theft Protection Act (for data breaches) and those covered by federal privacy laws like HIPAA or GLBA have specific requirements
- Notice and transparency requirements: The Internet Privacy Protection Act requires certain commercial websites to post privacy policies, but this is limited in scope compared to comprehensive privacy laws[2]
- Consumer request response procedures: No general requirements exist for responding to consumer privacy requests
- Security and breach notification rules: The Michigan Identity Theft Protection Act requires businesses to notify consumers of data breaches involving personal information[2][11]
If SB 359 passes, businesses processing personal data of 100,000+ Michigan consumers, or 25,000+ consumers while deriving revenue from data sales, would face comprehensive compliance requirements[5][12].
Practical Impact
- How these laws protect residents in daily life: Current protections are minimal – residents receive breach notifications and have some protection against social media password requests from employers, but lack control over routine data collection by apps, websites, and retailers
- What to do if rights are violated: Michigan residents can file complaints with the Attorney General’s Consumer Protection Team for potential fraud or deceptive practices, though privacy violations specifically may not be covered[13][14]
- Limitations and gaps in protection: Michigan residents have significantly fewer privacy protections than those in California, Virginia, Colorado, Utah, Connecticut, and other states with comprehensive privacy laws – they cannot control data sales, request data deletion, or access collected information
Comparison Context
- How Michigan compares to leading privacy states: Michigan significantly lags behind states like California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), and others that have enacted comprehensive privacy frameworks providing consumer control over personal information
- What residents might be missing compared to other states: Rights to access personal data, delete information, opt out of sales and targeted advertising, correct inaccurate data, and receive clear privacy notices – protections that over 100 million Americans in other states currently enjoy[10]
Action Steps for Residents
- Immediate steps to protect privacy: Rely on privacy settings in apps and services, read privacy policies when available, and use federal rights under laws like CCPA when dealing with covered businesses
- How to exercise legal rights (if available): File complaints with the Michigan Attorney General’s office for potential consumer protection violations, though specific privacy rights are currently limited
- Resources for staying informed: Monitor Michigan Legislature website for updates on SB 359, sign up for legislative alerts, and contact your representatives to express support for privacy legislation
Official Resources and Contact Information
Michigan Legislature
To track Senate Bill 359 and other privacy legislation, visit the Michigan Legislature website at legislature.mi.gov. You can search for specific bills, view committee schedules, and access legislative analyses.
Contacting Your Representatives
Find your specific state senator and representative by visiting legislature.mi.gov and using their district lookup tool. Each Michigan resident has one state senator and one state representative who can be contacted about privacy legislation[15][16].
Michigan Legislature contact information:
State Capitol, P.O. Box 30036, Lansing, MI 48909
Senate: senate.michigan.gov
House: house.mi.gov
Consumer Protection
For current consumer protection issues, including potential privacy violations, contact the Michigan Attorney General’s Consumer Protection Team:
Michigan Attorney General – Consumer Protection Division
G. Mennen Williams Building
525 W. Ottawa Street
P.O. Box 30213
Lansing, MI 48909
Phone: (517) 335-7599 or Toll-Free (877) 765-8388
Online complaint form available at michigan.gov/ag
Legislative Updates and Public Comment
The Michigan Senate Committee on Finance, Insurance, and Consumer Protection handles SB 359. Committee information and hearing schedules are available on the legislature website. Citizens can submit written testimony or attend public hearings when scheduled[5][17].
For advocacy and staying informed about privacy legislation, contact organizations like the Electronic Privacy Information Center (EPIC), which has testified in support of Michigan’s privacy bills[6][18].
Sources and Citations
Last Updated August 2025. Written with contributions from both human authors and Perplexity AI. If you find incorrect or outdated information let us know at support@optery.com.