First 100 Days: Upcoming Regulatory Signals for Cyber and Privacy

KPMG Regulatory Insights

• Innovating Cyber & Protecting Privacy:  Recognition of cyber risks, and the interplay between innovation and data privacy amidst priorities for innovation, speed and competitiveness.
• Shifts in Federal Role: Infrastructure and cyber preparedness a focus of states; a general pullback on federal advisory councils. 
• State Expansion:  State privacy and cyber bills expand in concert with proposed AI legislation; efforts to “fill the gap”.

 __________________________________________________________________________________________________________________________________________________

March 2025

The new Administration acted early to pull back prior advisory councils focused on cyber and privacy though direct actions to change the overall regulatory trajectory at the federal level appear limited. States, however, have continued to actively pursue cyber- and privacy-related legislation/regulation in these areas, often in relation to AI. Signals for potential regulatory change can be seen in:

1. Federal actions/directives, including a pullback on regulatory outreach/advisory committees, redirection of infrastructure responsibilities to the states, congressional activity, and the issuance of new regulatory rules, tools, and frameworks.
2. State laws and regulations, including an expanding number and variety of cyber and privacy expectations across many states, creating a patchwork of regulatory responsibilities. 

Download the full report below to read more.