Does Michigan Have a Comprehensive Consumer Privacy Law in 2026?

No, Michigan does not have a comprehensive consumer privacy law in 2026. The state's main proposal, Senate Bill 359 (the Personal Data Privacy Act), was introduced in June 2025 and remained pending in the Senate Committee of the Whole without passing either chamber as of the most recent tracked legislative update in early 2026.

What's Actually Moving in Lansing

• SB 359 is modeled on the wave of state privacy laws passed since 2023, but it has not cleared the Michigan Senate, let alone the House, according to the most recent legislative tracking available.
• Political control makes near-term passage less likely. Control of the Michigan House shifted to Republican leadership during the current session, and general-purpose consumer privacy bills of this kind have stalled in similar circumstances in other states.
• Narrower bills are moving instead of the broad one. A reproductive health data privacy bill (HB 5769) remained in committee as of an April 14, 2026 action, and a separate bill on algorithmic surveillance pricing (HB 5771) was introduced in March 2026 — both narrower in scope than a general consumer privacy statute.

What Covers Michigan Residents Right Now

Without a state law, Michigan residents fall back on the same baseline every uncovered state relies on:

• Federal sectoral law still applies — COPPA for children's data, TCPA for calls and texts, CAN-SPAM for commercial email, and HIPAA or GLBA where health or financial data is involved.
• Any business already covered by another state's privacy law typically extends the same practices to all its customers rather than building a state-by-state compliance system, so a Michigan resident may get CCPA- or VCDPA-style treatment indirectly, through a business's broader compliance posture rather than through Michigan law itself.
• Illinois' BIPA and similar biometric laws don't reach outside their own states, so biometric ad tech — facial scans in a virtual try-on tool, for instance — that would trigger liability in Illinois carries no equivalent state-law exposure for a Michigan-only audience.

Why Marketers Shouldn't Assume This Is Permanent

Michigan has introduced comprehensive privacy legislation across multiple sessions without passage, which is the same pattern several other states followed for years before eventually passing a law once House and Senate versions aligned. Treating "Michigan has no law" as a stable, long-term fact is risky — the moment SB 359 or a successor bill clears committee with bipartisan support, it becomes a one-signature step to compliance obligations for any business targeting Michigan residents.

Bottom Line

Michigan imposes no state-level consumer privacy obligations of its own in 2026, but build for the states you're already covered by rather than leaning on the absence of a Michigan law, since federal rules and your existing compliance program likely already extend most of the same protections — and legislative language in Lansing can move quickly once a session finds alignment.

Source: Michigan Senate Bill 359 ("Personal Data Privacy Act") legislative tracking records; Michigan House Bill 5769 and HB 5771 committee tracking records, 2026 session.