Michigan has no comprehensive consumer privacy statute, so obligations there come from its breach-notification law, sector-specific rules and federal statutes. This page collects our coverage touching Michigan. For the underlying law rather than the news, see our Michigan privacy law page.
Employee Privacy
October 19, 2026
Michigan's Bullard-Plawecki Employee Right to Know Act, in force since January 1, 1979, gives employees of employers with four or more workers a right to review and copy their personnel records, but excludes eight categories of material, bars records of off-duty associations and political activity, requires mailed notice before disciplinary records go to outsiders, and lets employees sue.
Read more →
Breach Notification
October 19, 2026
Michigan's breach duty is section 12 of the Identity Theft Protection Act, MCL 445.72. It requires notice unless the entity determines, with ordinary prudence, that the breach is not likely to cause substantial loss, injury or identity theft. Insurers are carved out to a parallel regime in the Insurance Code, and Senate Bills 360 to 364 would add Attorney General notice.
Read more →
VPPA
October 19, 2026
Michigan's Preservation of Personal Privacy Act bars businesses that sell, rent or lend books, sound recordings or videos from knowingly disclosing records identifying what a customer bought. Until 2016 PA 92 took effect on July 31, 2016, it carried $5,000 in statutory damages; claims over pre-amendment disclosures then produced a run of federal rulings on its limitations period.
Read more →