Earlier this month, California introduced Assembly Bill 2863, proposing amendments to the state's Automatic Renewal Law (ARL). If passed, the amendments would impose stricter requirements on disclosures, consent, and cancellation processes. Businesses would be mandated to obtain a consumer's affirmative consent separately from other contract terms for any automatic renewal or continuous service offer, and keep records of this consent for at least three years, or one year after contract termination. The amendments would also prohibit businesses from employing dark patterns in contracts and misrepresenting material facts related to the transaction or the underlying goods or services.

Virginia's House Bill (HB) 744, effective from July 1, 2024, amends continuity billing regulations. It requires businesses to provide additional notifications to consumers before contracts extend under automatic renewal clauses. The bill applies to both business-to-consumer and business-to-business contracts. Changes include a broader application of continuity billing contracts, additional notifications about the automatic renewal process, and the prohibition of charging a consumer's financial account for an automatic renewal without first obtaining the consumer's affirmative consent.

The Maryland Legislature approved the Maryland Online Data Privacy Act of 2024 (MODPA) on April 6, 2024, which is expected to be signed into law by Governor Wes Moore and come into effect on October 1, 2025. The Act explicitly mentions dark patterns and excludes agreement obtained through the use of dark patterns from the scope of "consent."

The Nebraska Data Privacy Act, approved in April 2024, outlines specific coverage thresholds, incorporates explicit language for universal opt-out mechanisms, and prohibits the use of dark patterns to obtain consent from data subjects. The act defines dark patterns as user interfaces designed or manipulated to substantially subvert or impair user autonomy, decision-making, or choice.