Pennsylvania has no comprehensive consumer privacy statute, so obligations there come from its breach-notification law, sector-specific rules and federal statutes. This page collects our coverage touching Pennsylvania. For the underlying law rather than the news, see our Pennsylvania privacy law page.
Breach Notification
September 28, 2026
Pennsylvania's breach statute is the Act of December 22, 2005, P.L. 474, No. 94. Senate Bill 696, enacted as Act 151 of 2022, rewrote its trigger and added duties for State agencies, contractors, counties, schools and municipalities. Senate Bill 824, enacted as Act 33 of 2024, added Attorney General notice and credit monitoring and quietly narrowed the medical information element.
Read more →
Pixel Tracking
September 28, 2026
Pennsylvania's Wiretapping and Electronic Surveillance Control Act gives anyone whose electronic communication is intercepted a civil claim for at least $1,000, and it requires every party's consent. Popa v. Harriet Carter Gifts read it to reach tracking code running in a Pennsylvania browser. Later session replay appeals turned on personal jurisdiction and Article III standing.
Read more →
Pixel Tracking
August 24, 2026
Plaintiffs suing over analytics pixels, session recording and web chat rarely plead a privacy statute. They plead eavesdropping laws written for telephone wires in 1967 and 1968, which carry per-violation damages and no requirement to prove loss. This guide sets out the statutory elements those claims turn on, the party-consent question that decides most of them, and the newer pen-register theory.
Read more →