{"id":4024,"date":"2022-06-14T12:00:00","date_gmt":"2022-06-14T12:00:00","guid":{"rendered":"https:\/\/2024.thenexus.today\/index.php\/2022\/06\/14\/federal-privacy-legislation-the-best-chance-yet-to-pass-a-strong-bill\/"},"modified":"2022-06-14T12:00:00","modified_gmt":"2022-06-14T12:00:00","slug":"federal-privacy-legislation-the-best-chance-yet-to-pass-a-strong-bill","status":"publish","type":"post","link":"https:\/\/2024.thenexus.today\/index.php\/2022\/06\/14\/federal-privacy-legislation-the-best-chance-yet-to-pass-a-strong-bill\/","title":{"rendered":"Federal privacy legislation: It&#8217;ll be an interesting summer! (UPDATED)"},"content":{"rendered":"<p><em>Last updated: June 18. \u00a0Originally published: June 14. \u00a0<\/em><\/p>\n<p>As Congress heads into the summer, there&#8217;s a sudden surge of activity on federal privacy legislation. The recently-released American Data Privacy and Protection Act (ADPPA) has <a href=\"https:\/\/energycommerce.house.gov\/committee-activity\/hearings\/hearing-on-protecting-americas-consumers-bipartisan-legislation-to\">a hearing in the House on Tuesday, June 14<\/a>. Meanwhile, Sen. Maria Cantwell (D-WA) is circulating a draft of her own bill, a revision to 2019&#8217;s Consumer Online Privacy Rights Act (COPRA). \u00a0As if that&#8217;s not enough, there are also several different children&#8217;s privacy bills being considered. Exciting!<\/p>\n<p><em>Update, June 15: and now there&#8217;s another bill, the <a href=\"https:\/\/vice.com\/en\/article\/4axydq\/legislation-aims-to-ban-health-and-location-data-protection-act\">Health and Location Data Protection Act<\/a> \u00a0(HLDPA).<\/em><\/p>\n<p>In late May, over 50 civil rights, civil liberties, and consumer protection organizations urged Congress to &#8220;<a href=\"https:\/\/civilrights.org\/resource\/support-a-comprehensive-consumer-privacy-law-that-safeguards-civil-rights-online\">pass comprehensive consumer privacy legislation during this session that prohibits data-driven discrimination and ensures that everyone has the right to equal opportunity on the internet.<\/a>&#8221; Signers including Lawyers Committee on Civil Rights, EPIC Privacy, CDT, Access Now, and Free Press have all described the draft ADPPA as encouraging \u2013 both because of its explicit civil rights protections, and its bipartisan support (it&#8217;s sponsored by House Energy and Commerce Chair Frank Pallone (D-NJ), ranking member Cathy McMorris Rodgers (R-WA.) and Sen. Roger Wicker (R-MI), ranking member of the Senate Commerce Committee). <\/p>\n<p>Issues like whether individuals can sue companies who violate their privacy (a &#8220;private right of action&#8221;) and whether the federal bill will prohibit states from passing stronger legislation (&#8220;pre-emption&#8221;) have previously been sticking points to getting bipartisan support. ADPPA&#8217;s compromises in both of these areas are seen as breaking a stalemate. \u00a0Since bipartisan support is crucial to get anything through Congress, this is indeed a big deal.<\/p>\n<p>On the other hand, there are also lots of concerns about ADPPA. \u00a0<\/p>\n<ul>\n<li>Sen. Cantwell has criticized its private right of action \u2013 which wouldn&#8217;t take effect until 2026 \u2013 as too weak.<\/li>\n<li>Sen. Brian Schatz (D-HI) has reportedly said that a bill without a duty of care should not pre-empt state consumer privacy laws; Sen. Cantwell also opposes pre-emption. \u00a0<\/li>\n<li><a href=\"https:\/\/www.aclu.org\/letter\/aclu-letter-urgent-concerns-privacy-legislation-and-legislative-process\">ACLU says ADPPA needs substantial revision<\/a>, and is concerned that it will be rushed to the floor. <\/li>\n<li><a href=\"https:\/\/www.eff.org\/deeplinks\/2022\/06\/eff-urges-congress-strengthen-american-data-privacy-and-protection-act\">EFF has urged Congress to strengthen the bill<\/a><\/li>\n<li>The Chamber of Commerce describes the bill as &#8220;<a href=\"https:\/\/www.cnbc.com\/2022\/06\/09\/bipartisan-privacy-proposal-is-unworkable-chamber-of-commerce-says.html\">unworkable<\/a>.&#8221;<\/li>\n<li>Ari Ezra Waldman (author of the outstanding <em>Industry Unbound<\/em>) describes it as <a href=\"https:\/\/twitter.com\/ariezrawaldman\/status\/1532365134643044359\">another gift to industry<\/a>. \u00a0<\/li>\n<\/ul>\n<p>Some of the links below go into more details about other issues, including law enforcement access, a &#8220;duty of loyalty&#8221; that appears to set a very low bar, the complex pre-emption clause, and the exclusion of de-identified data and employment data.<\/p>\n<p>So while I too am encouraged by the bipartisan interest in passing privacy legislation, I&#8217;m tempering my enthusiasm for now. Based on what we&#8217;ve seen over the years in the Washington state legislative battles, I&#8217;m nervous that language in the bill that <em>looks <\/em>strong will turn out to be weaker than it appears, or will be undercut by other sections of the bill. And of course, big tech and data brokers will no doubt claim that even the current text will cause the sky to fall, and will devote huge lobbying efforts to weaken it \u2013 <a href=\"https:\/\/themarkup.org\/privacy\/2022\/05\/26\/tech-industry-groups-are-watering-down-attempts-at-privacy-regulation-one-state-at-a-time\">as they routinely have with state privacy bills<\/a>.<\/p>\n<p>One approach that proved very useful here in Washington state is to look at real-world privacy abuses that are occurring today and we expect to see in the near future. In 2021, for example, we looked at whether the state-level bill would prevent ICE access to data from Muslim prayer apps; and earlier this year, we focused on the Markup&#8217;s reporting on ed tech abuses (<a href=\"https:\/\/themarkup.org\/machine-learning\/2022\/01\/11\/this-private-equity-firm-is-amassing-companies-that-collect-data-on-americas-children\">here<\/a> and <a href=\"https:\/\/themarkup.org\/machine-learning\/2022\/01\/13\/college-prep-software-naviance-is-selling-advertising-access-to-millions-of-students\">here<\/a>). \u00a0As we get more information about the legislation, this will help understand how effectively ADPPA and COPRA will actually be in protecting us. \u00a0<\/p>\n<p>So, we shall see. But to end on a positive note: There&#8217;s general agreement that 2022 is the best chance yet to get a strong privacy bill through Congress. With luck \u2013 and enough pressure from privay groups and grassroots activists to counter big tech&#8217;s lobbying \u2013 the bills will improve as they move through the process and converge on something that really does protect our privacy. Which would be pretty darned cool &#8230;<\/p>\n<p>So stay tuned for an interesting summer!<\/p>\n<h3 id=\"links-with-more-information\">Links with more information<\/h3>\n<ul>\n<li><a href=\"https:\/\/www.commerce.senate.gov\/services\/files\/6CB3B500-3DB4-4FCC-BB15-9E6A52738B6C\">Here\u2019s the June 3 draft of the ADPPA<\/a>. \u00a0It\u2019s long. \u00a0Why is there a section on \u201cDigital Content Forgeries\u201d in a privacy bill? I have no idea, and neither does anybody else I\u2019ve talked to.<\/li>\n<li>Rebecca Kern\u2019s <a href=\"https:\/\/www.politico.com\/news\/2022\/06\/03\/bipartisan-draft-bill-breaks-stalemate-on-federal-privacy-bill-negotiations-00037092\">Bipartisan draft bill breaks stalemate on federal data privacy negotiations<\/a> in <em>Politico,<\/em> Will Oremus\u2019 <a href=\"https:\/\/www.washingtonpost.com\/technology\/2022\/06\/03\/internet-privacy-congress-compromise-proposal\/\">House and Senate members unveil stalled data privacy bill in<\/a> the <em>Washington Post, <\/em>and Chris Mills Rodrigo&#8217;s <a href=\"https:\/\/thehill.com\/policy\/technology\/3522026-why-a-bipartisan-data-privacy-proposal-faces-an-uphill-battle\/\">Why a bipartisan data privacy proposal faces an uphill battle<\/a> in <em>The Hill <\/em>are all good overviews of the political situation.<\/li>\n<li>M\u00fcge Fazlioglu&#8217;s<a href=\"https:\/\/iapp.org\/news\/a\/distilling-the-essence-of-the-american-data-privacy-and-protection-act-discussion-draft\/\"> Distilling the essence of the American Data Privacy and Protection Act discussion draft<\/a> and Cobun Zweifel-Keegan&#8217;s <a href=\"https:\/\/iapp.org\/news\/a\/understanding-the-scope-of-the-draft-american-data-privacy-and-protection-act\/\">Understanding the scope of the draft American Data Privacy and Protection Act<\/a>, both on <em>IAPP, <\/em>delve into some key areas.<\/li>\n<li><a href=\"https:\/\/iapp.org\/news\/a\/were-so-close-to-getting-data-loyalty-right\/\">We\u2019re so close to getting data loyalty right<\/a>, by Woodrow Harzog and Neil Richards, also on <em>IAPP<\/em>, analyzes the &#8220;loyalty duties&#8221; in ADPPA and other legislation in more detail. <\/li>\n<li>Olga Kagan&#8217;s<a href=\"https:\/\/www.linkedin.com\/pulse\/federal-privacy-law-incoming-new-bipartisan-bill-filed-odia-kagan\"> Federal Privacy Law incoming? New Bipartisan Bill Filed<\/a> on <em>LinkedIn <\/em>and David Stauss&#8217;<a href=\"https:\/\/www.bytebacklaw.com\/2022\/06\/bipartisan-u-s-federal-privacy-bill-circulated\/\"> Bipartisan U.S. Federal Privacy Bill Circulated<\/a> on <em>Byte Back <\/em>have a detailed run-down on the bill&#8217;s contents.<\/li>\n<li>Shoshana Wodinsky&#8217;s<a href=\"https:\/\/gizmodo.com\/american-data-privacy-and-protection-act-improvements-1849022612\"> Our Country Moves Closer to a Federal Privacy Law, and I Move Closer to Losing My Mind<\/a> and Mike Masnick&#8217;s<a href=\"https:\/\/www.techdirt.com\/2022\/06\/06\/new-bipartisan-federal-privacy-bill-tries-to-build-consensus-support-and-basically-succeeds-in-annoying-everyone\/\"> New \u2018Bipartisan\u2019 Federal Privacy Bill Tries To Build Consensus Support, And Basically Succeeds In Annoying Everyone<\/a> provide some more skeptical views.<\/li>\n<li><a href=\"https:\/\/twitter.com\/blakereid\/status\/1532788421260738560\">Blake Reid&#8217;s Twitter thread<\/a> goes into depth on pre-emption; his summary is &#8220;As far as I can tell, the default-preemption structure coupled with broad\/ambiguous exceptions (particularly the civil rights exception) will introduce a tremendous degree of uncertainty about what is actually preempted.&#8221; <a href=\"https:\/\/twitter.com\/BillMcGev\/status\/1532826822173372416\"> William McGeveran<\/a> and<a href=\"https:\/\/twitter.com\/wbm312\/status\/1532842339227422720\"> Whitney Merrill<\/a> also make some good points.<\/li>\n<li>A dozen members of the Disinfo Defense League, including Free Press, Access Now, Kairos Action, Media Justice, Equality Labs, Asian Americans Advancing Justice, Muslim Advocates, and Common \u00a0<a href=\"https:\/\/www.freepress.net\/news\/press-releases\/disinfo-defense-league-calls-congress-ensure-new-privacy-legislation-safeguards-civil-rights\">called on Congress to ensure new privacy legislation safeguards everyone\u2019s online civil rights<\/a>.<\/li>\n<\/ul>\n<p><strong>Update, June 18:<\/strong> <a href=\"https:\/\/threadreaderapp.com\/thread\/1536716807624458240.html\">here&#8217;s my live-tweeting of the hearing<\/a> (unrolled into a single web page for your convenience). \u00a0And, <a href=\"https:\/\/threadreaderapp.com\/thread\/1536713261332279299.html\">here&#8217;s EPIC&#8217;s live-tweeting<\/a>, which also has links to witnesses&#8217; written testimony. \u00a0 Some new links since then:<\/p>\n<ul>\n<li>Jessica Rich&#8217;s <a href=\"https:\/\/www.adlawaccess.com\/2022\/06\/articles\/readout-on-house-privacy-hearing-wide-attendance-lots-of-issues-full-steam-ahead\/\">Readout on House Privacy Hearing: Wide Attendance, Lots of Issues, Full Steam Ahead<\/a> on Kelley Drye&#8217;s <em>Add Law Access Blog; <\/em>Joe Duball&#8217;s <a href=\"https:\/\/iapp.org\/news\/a\/us-house-committee-unpacks-federal-privacy-momentum-opportunity\/\">US House committee showcases federal privacy momentum, opportunity<\/a>, on <em>IAPP<\/em>; <a href=\"https:\/\/www.jdsupra.com\/legalnews\/insights-from-the-house-subcommittee-2790383\/\">Insights from the House Subcommittee Hearing on ADPPA<\/a>, by Hilary Higgins, Ali Jessani, and Kirk Nahra of Wilmer Hale on <em>JD Supra; <\/em>and <a href=\"https:\/\/www.nasdaq.com\/articles\/u.s.-comprehensive-federal-privacy-legislation-takes-major-step-forward\">U.S. Comprehensive Federal Privacy Legislation Takes Major Step Forward<\/a> by Ieuan Jolly and Kris Ekdahl of Linklaters<em> <\/em>on<em> <\/em>are all good overviews.<\/li>\n<li>Cristiano Lima notes that <a href=\"https:\/\/www.washingtonpost.com\/politics\/2022\/06\/15\/senate-holdouts-pose-hurdle-congresss-surging-privacy-push\/\">the Senate may be a roadblock<\/a>, with quotes reactions from Sens. Blumenthal, Schatz, and Cantwell.<\/li>\n<li>Jolina Cuarasema&#8217;s <a href=\"https:\/\/www.commonsensemedia.org\/kids-action\/articles\/the-time-is-now-for-comprehensive-federal-data-privacy-legislation\">The Time is Now for Comprehensive Federal Data Privacy Legislation<\/a>, on <em>Common Sense<\/em>, summarizes her testimony and highlights some provisions that need to be added to better predict kids and teens.<\/li>\n<li>Ashley Johnson&#8217;s <a href=\"https:\/\/itif.org\/publications\/2022\/06\/17\/bills-show-remaining-divisions-on-federal-data-privacy-legislation\/null\/publications\/2022\/06\/17\/bills-show-remaining-divisions-on-federal-data-privacy-legislation\/\">Three Bills Show Remaining Divisions in Attempt to Reach a Compromise on Federal Data Privacy Legislation<\/a>, on ITIF, compares and contrasts ADPPA with COPRA and Sen. Schatz&#8217; Data Care Act. \u00a0<\/li>\n<li><a href=\"https:\/\/www.npr.org\/2022\/06\/16\/1105212701\/users-beware-apps-are-using-a-loophole-in-privacy-law-to-track-kids-phones\">Users beware: Apps are using a loophole in privacy law to track kids\u2019 phones<\/a>, a discussion between Washington Post tech columnist Geoffrey Fowler NPR Fresh Air Dave Davies, goes into the &#8220;actual knowledge&#8221; loophole.<\/li>\n<li><a href=\"https:\/\/iapp.org\/news\/a\/what-does-the-newest-u-s-privacy-bill-mean-for-cybersecurity\/\">What does the newest U.S. privacy bill mean for cybersecurity?<\/a>, by Tatyana Bolton, Brandon Pugh, and Sofia Lesmes on IAPP, looks at the security implications.<\/li>\n<\/ul>\n<p>Keep in mind that authors of various articles are not necessarily neutral here! \u00a0For example, ITIF represents the tech industry, and in their testimony pressed for ADPPA to be weakened. \u00a0Still, these are all good analyses &#8230; and who am I kidding, I&#8217;m not particularly neutral either \ud83d\ude0e. \u00a0<\/p>\n<\/p>\n<p>________________________________________<\/p>\n<p><em>Image credit: <\/em>JessicaRodriguezRivas, via <a href=\"https:\/\/commons.wikimedia.org\/wiki\/File:Home_of_the_US_Congress.jpg\">Wikipedia Commons<\/a>. \u00a0licensed under the <a href=\"https:\/\/en.wikipedia.org\/wiki\/en:Creative_Commons\">Creative Commons<\/a><a href=\"https:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/deed.en\" rel=\"nofollow\">Attribution-Share Alike 4.0 International<\/a> license.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last updated: June 18. \u00a0Originally published: June 14. \u00a0 As Congress heads into the summer, there&#8217;s a sudden surge of activity on federal privacy legislation. The recently-released American Data Privacy and Protection Act (ADPPA) has a hearing in the House on Tuesday, June 14. Meanwhile, Sen. Maria Cantwell (D-WA) is circulating a draft of her [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[458,459],"class_list":["post-4024","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-adppa","tag-federal-privacy-legislation"],"_links":{"self":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts\/4024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/comments?post=4024"}],"version-history":[{"count":0,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts\/4024\/revisions"}],"wp:attachment":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/media?parent=4024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/categories?post=4024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/tags?post=4024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}