On the Horizon — Not Yet Law
New Mexico comprehensive privacy bill ("CHISPA")
Would have been one of the strictest state privacy laws nationally: a 15,000-consumer threshold, a ban on geofencing sensitive locations, and a private right of action ($2,500–$7,500 per violation). It died procedurally rather than on the merits, which makes a 2027 reintroduction likely.
Status: Dead for the 2026 session. Introduced Jan 21, 2026 and triple-referred (SCC/SHPAC/SJC); the Senate Health and Public Affairs Committee reported it with a Do Pass recommendation on Feb 5, 2026, but action was then postponed indefinitely and the bill never cleared its remaining referrals before New Mexico's 30-day session adjourned Feb 19, 2026. Re-verified Sep 11, 2026 — nmlegis.gov now records the bill's location simply as "Died".
Not law — died in the 2026 session. New Mexico runs annual sessions, so watch for reintroduction in 2027.
This is a general reference, not legal advice or a determination that this law applies to your specific business. Run the full questionnaire to check against your actual revenue, data volume, and data types.