Legislation would strengthen safeguards for Michigan consumers by empowering AG office to investigate security breaches and hold violators accountable

LANSING, Mich. (Aug. 26, 2025) — Today, the Michigan Senate voted to pass Senate Bills 360364, bipartisan legislation spearheaded by Sen. Rosemary Bayer (D-West Bloomfield) to expand protections for Michigan consumers. Sponsored alongside Sens. Stephanie Chang (D-Detroit), Sue Shink (D-Northfield Twp.), Mary Cavanagh (D-Redford Twp.), and Ed McBroom (R-Waucedah Twp.), this bill package seeks to crack down on data breaches by enforcing stronger safeguards for companies that collect, own, or access personal information and require that they investigate and notify consumers if they believe a security breach has, or may have, occurred. This legislation would also empower the Attorney General’s office to investigate breaches and hold bad actors accountable.

“With more and more data breaches happening here in Michigan and across the country, it’s imperative we take action to protect consumers from the very real threats caused by the misuse and exploitation of their personal information,” said Sen. Bayer. “As a victim of identity theft myself, I understand all too well the headaches, harms, and fear that comes with it, and I’m working to do everything possible to make sure this doesn’t happen to anyone else. This legislation not only aims to prevent security breaches from happening in the first place — but in the event that they do occur — it equips the Attorney General’s office with the adequate tools to respond and investigate.”

Thirty-seven other states currently require that entities notify the Attorney General when data breaches occur. This bill package would enable Michigan to catch up with the nation on this by requiring that entities investigate and notify affected consumers, as well as the Attorney General’s office, if the number of those impacted exceeds 100.

This legislation now heads to the House for consideration. 

###