{"id":4178,"date":"2023-01-11T01:04:00","date_gmt":"2023-01-11T01:04:00","guid":{"rendered":"https:\/\/2024.thenexus.today\/index.php\/2023\/01\/11\/wa-privacy-more-favorable-environment\/"},"modified":"2023-01-11T01:04:00","modified_gmt":"2023-01-11T01:04:00","slug":"wa-privacy-more-favorable-environment","status":"publish","type":"post","link":"https:\/\/2024.thenexus.today\/index.php\/2023\/01\/11\/wa-privacy-more-favorable-environment\/","title":{"rendered":"A much more favorable environment, but a lot of complexity: Washington state privacy legislation 2023 (UPDATED)"},"content":{"rendered":"<blockquote class=\"kg-blockquote-alt\"><p>Last updated February 4. \u00a0See the <a href=\"#update-log\">update log<\/a> below.<\/p><\/blockquote>\n<blockquote><p>Washington is justifiably looked to as a tech-savvy state, and legislation that gets passed here will influence other states and the national debate.<\/p>\n<p>\u2013 me in <a href=\"https:\/\/jedii.tech\/wa-privacy-legislation-2021\/\">The stakes are high: Washington state privacy, facial recognition, and automated decision systems legislation 2021<\/a><\/p><\/blockquote>\n<p>The 2023 Washington state legislative session is already in high gear, and once again there&#8217;s some significant privacy and automated decision systems legislation on the agenda. \u00a0Even though none of the bills I was excited about in &#8220;The stakes are high&#8221; wound up passing, Washington state privacy and tech justice advocates have continued to build our power over the last two years. The environment in 2023 is much more favorable than it&#8217;s ever been for strong privacy legislation \u2013 nationally, and in Olympia \u2013 so there&#8217;s good reason for optimism.<\/p>\n<p>One of the reasons the legislative environment is much more favorable in 2023 is that privacy threats have become a lot more real to many people in the aftermath of the Supreme Court&#8217;s <em>Dobbs<\/em> decision overturning Roe. \u00a0The increasing number of states criminalizing abortion \u2013 and allowing &#8220;civil enforcement&#8221;, aka vigilantes and bounty hunters \u2013 highlights the urgency of new legislation like <strong>My Health My Data<\/strong> and the <strong>Shield Law<\/strong> as well as the broad protections of the <strong>People&#8217;s Privacy Act<\/strong>. \u00a0<\/p>\n<p>Before we get to the specifics of this year&#8217;s legislation, though, let&#8217;s catch up on where we left off. \u00a0If you want information about a particular bill, feel free to skip ahead!<\/p>\n<ul>\n<li><a href=\"#MyHealthMyData\">My Health My Data<\/a><\/li>\n<li><a href=\"#PeoplesPrivacyAct\">People&#8217;s Privacy Act<\/a><\/li>\n<li><a href=\"#ShieldLaw\">Shield Law<\/a><\/li>\n<\/ul>\n<p><!--kg-card-begin: html--><a id=\"whats-past-is-prologue\"><\/a><\/p>\n<h2>What&#8217;s past is prologue<\/h2>\n<p><!--kg-card-end: html--><\/p>\n<p>If you&#8217;re just tuning in, here&#8217;s a quick overview on the multi-year legislative battle in Washington state. \u00a0<\/p>\n<p>The tech industry and their allies have spent the last several years trying but failing to pass the <strong>Bad Washington Privacy Act<\/strong> \u00a0(Bad WPA). \u00a0In 2019, the Senate almost-unanimously advanced it \u2013 only Sen. Bob Hasegawa (D-Seattle) voted no. \u00a0 The House had been working on a bill as well, but by the end of the session nothing made it to the House floor for a vote, so nothing passed. \u00a0<a href=\"https:\/\/na01.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fwww.politico.eu%2Farticle%2Fhow-lobbyists-rewrote-washington-state-privacy-law-microsoft-amazon-regulation%2F&amp;data=04%7C01%7C%7Cf06046ac681047b964a808d9bf9c47fc%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637751500228034582%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=vhXnUzKyit%2BupO4OIUg9DCeOLfoyHGUOUZBfA3%2FdyAI%3D&amp;reserved=0\">How lobbyists rewrote Washington state\u2019s privacy law<\/a> and <a href=\"https:\/\/www.govtech.com\/policy\/Why-Did-Washington-States-Privacy-Legislation-Collapse.html\">Why Did Washington State\u2019s Privacy Legislation Collapse?<\/a> give an overview of the issues.<\/p>\n<p>In 2020 once again the version the Senate advanced the Bad WPA overwhelmingly (only Sen. Hasegawa voting no). \u00a0For calibration, this bill was literally unenforceable (at least according to the AG&#8217;s Office, who were the only people allowed to enforce it) but everybody agreed that it was an improvement on the 2019 version. \u00a0After a great hearing and outstanding floor debate, the House strengthened it significantly, and passed a version that was enforceable and included a private right of action \u2013 but the Bad WPA&#8217;s sponsor (whose treasured friend, former Senate colleague is now an Amazon lobbyist) refused to compromise. \u00a0<a href=\"https:\/\/medium.com\/a-change-is-coming\/a-bad-day-for-a-bad-privacy-bill-a-good-day-for-privacy-a2aeea8e8739\">A bad day for a bad privacy bill, a good day for privacy<\/a> and <a href=\"https:\/\/medium.com\/a-change-is-coming\/significant-progress-although-still-a-ways-to-go-sb-6280-sb-6281-update-82972ab8536d\">Significant progress, although still a ways to go (SB 6280\/SB 6281 update)<\/a> have my pespectives on this and the facial recognition bill.<\/p>\n<p>The <strong><a href=\"https:\/\/www.aclu-wa.org\/story\/introducing-people%E2%80%99s-privacy-act-real-privacy-protections-everyone\">People&#8217;s Privacy Act<\/a> <\/strong>\u2013 developed by the ACLU of Washington working with the community-based groups of the <a href=\"https:\/\/aclu-wa.org\/pages\/tech-equity-coalition\"><strong>Tech Equity Coalition (TEC)<\/strong><\/a>, and introduced by Rep. Shelley Kloba in January 2021 \u2013 transformed the legislative discussion even though it hasn&#8217;t yet gotten a hearing. \u00a0The state Senate once again passed a (slightly-improved) version Bad WPA overwhelmingly in 2021, with only Sen. Hasegawa voting no, but it died in committee in the House despite the sponsor&#8217;s negotiating tactic of holding funding for eviction prevention hostage. Eli Sanders&#8217; reporting on this was excellent, in <a href=\"https:\/\/wildwest.substack.com\/p\/inside-one-states-fierce-battle-over\">Inside One State\u2019s Fierce Battle Over Online Privacy<\/a>, <a href=\"https:\/\/www.geekwire.com\/2021\/industry-backed-digital-privacy-bill-sees-head-spinning-changes-washington-state\/\">Industry-backed digital privacy bill sees head-spinning changes in Washington state<\/a><em>, <\/em>and <a href=\"https:\/\/wildwest.substack.com\/p\/a-digital-privacy-bill-dies-in-washington\">A Digital Privacy Bill Dies in Washington<\/a>. \u00a0<a href=\"https:\/\/jedii.tech\/the-clock-ticks-down-on-the-bad-wpa\/\">The Clock Ticks Down on the Bad Washington Privacy Act<\/a> has some of my perspectives near the end of the session.<\/p>\n<p>In 2022, Reps. Vandana Slatter and April Berg introduced the Foundational Data Privacy Act (FDPA) in an attempt to make incremental progress, and the People&#8217;s Privacy Act once again didn&#8217;t get a hearing. \u00a0The FDPA started with the BadWPA and the sponsors put a lot of effort in and appeared to have gotten industry to have made some concessions. \u00a0Privacy advocates were willing to work with the sponsors, but Washington Tech Industry Association (WTIA) continued to back the Bad WPA (hilariously telling legislators to <a href=\"https:\/\/wa-privacy.net\/correcting-misleading-claims-in-wtias-seattle-times-op-ed\/\">&#8220;stop looking to the past&#8221; and adopt a bill they had already rejected three times<\/a>) and after some procedural shenanigans all the FDPA&#8217;s improvements were removed and it was back to the Bad WPA which (surprise!) failed yet again after a last-minute attempt to sneak it through suffered <a href=\"https:\/\/wa-privacy.net\/it-aint-over-till-its-over\/#opposition\">another ignominious defeat<\/a>.<sup><a href=\"#notes\">1<\/a><\/sup><\/p>\n<p>On the facial recognition front, Rep. Cindy Ryu&#8217; s proposal in 2019 for a moratorium on government use didn&#8217;t garner enough support of move forward. Instead, <a href=\"https:\/\/www.aclu-wa.org\/story\/we-need-face-surveillance-moratorium-not-weak-regulations-concerns-about-sb-6280\">a Microsoft-backed &#8220;compromise&#8221; bill<\/a> with some basic guardrails passed in 2020. \u00a0The bill that passed actually <em>was <\/em>a compromise: implementation was delayed a year to give time for a funded task force to report back to the legislature in time for the 2021 session and potentially make changes. Unfortuantely, Gov. Inslee line-item vetoed the task force. \u00a0As a result, having legislation in place wound up being a barrier to progress on anything stronger in 2021 and 2022 \u2013 exactly as privacy advocates (including me!) had predicted in our testimony in 2020. \u00a0 Sen. Bob Hasegawa introduced a facial recognition moratorium bill in 2021, but it never got a hearing; neither did the People&#8217;s Privacy Act, which also included a ban on facial recognition and AI profiling in places of public accommodation. \u00a0<\/p>\n<p>Of course there&#8217;s a lot this quick summary leaves out, including all kinds of shenanigans by the tech industry (which has a lot of influence here in Washington) to try to sneak the Bad WPA through. \u00a0In 2021, for example, the Bad WPA&#8217;s sponsor reportedly threatened to hold eviction funding hostage unless his colleagues passed his bill. \u00a0Good times! \u00a0The references at the end have a long list of articles if you want to wallow in the details.<\/p>\n<p>Despite their repeated failures here in Washington, \u00a0big tech has been more successful at getting the Bad WPA adopted elsewhere; it&#8217;s the basis for privacy laws Virginia, Colorado, and Connecticut. \u00a0Todd Feathers and Alfred Ng&#8217;s <a href=\"https:\/\/themarkup.org\/privacy\/2022\/05\/26\/tech-industry-groups-are-watering-down-attempts-at-privacy-regulation-one-state-at-a-time\">Tech Industry Groups Are Watering Down Attempts at Privacy Regulation, One State at a Time<\/a> and Ben Brody&#8217;s <a href=\"https:\/\/www.protocol.com\/policy\/state-privacy-utah-spsc\">Quiet industry lobbyists are watering down state privacy laws<\/a> look at industry&#8217;s strategy in more detail.<\/p>\n<p><!--kg-card-begin: html--><a id=\"significant-successes\"><\/a><\/p>\n<h2>Significant successes for Washington privacy advocates<\/h2>\n<p><!--kg-card-end: html--><\/p>\n<p>As well as stopping the tech industry from passing the BadWPA, Washington privacy advocates also blocked an industry-backed digital identity bill in 2022, and supported the successful Silenced No More Act, protecting whistleblowers. \u00a0Given the resources Microsoft, Amazon, WTIA, and the rest of the tech industry devote to lobbying here, that&#8217;s pretty impressive. \u00a0And there have also been some major successes at the local level:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.geekwire.com\/2021\/seattles-king-county-becomes-first-u-s-county-ban-government-use-facial-recognition-software\/\">King County (home of Seattle, Amazon, and Microsoft) passed the county&#8217;s first county-wide ban on government use of facial recognition technology<\/a> in June 2021<\/li>\n<li><a href=\"https:\/\/peoplefirstbellingham.org\/victorystatement\/index.html\">Bellingham passed initiatives banning government use of facial recognition and predictive policing<\/a> in November 2021.<\/li>\n<li>Most recently, <a href=\"https:\/\/www.axios.com\/local\/seattle\/2022\/12\/01\/seattle-shotspotter-cut-budget-police\">Seattle City Council nixed the mayor&#8217;s request for $1M for the ShotSpotter gunshot detection system<\/a> in November 2022.<\/li>\n<\/ul>\n<p>2022 also featured involvement in federal privacy legislation debates by WA People&#8217;s Privacy, Indivisible groups around the state, and grassroots privacy advocates (including me!), supporting the Fourth Amendment Is Not For Sale Act and My Body My Data, and pushing to strengthen the American Data Privacy Protection Act (ADPPA). And, several of us also spoke at the FTC&#8217;s Public Forum on Commercial Surveillance or submitted formal comments \u2013 here&#8217;s mine, focusing on <a href=\"__GHOST_URL__\/consent-automated-systems-and-discrimination\/\">Consent, Automated Systems, and Discrimination<\/a>. <\/p>\n<p><!--kg-card-begin: html--><a id=\"MyHealthMyData\"><\/a><\/p>\n<h2>New in 2023: My Health My Data<\/h2>\n<p><!--kg-card-end: html--><\/p>\n<blockquote><p>&#8220;It&#8217;s long overdue that we have increased data protections for our most sensitive health data, and it&#8217;s taken on an increased urgency in a post-Dobbs world. This information, if it&#8217;s bought or sold, can do real harm.&#8221;<\/p>\n<p>\u2013 State Representative Vandana Slatter, quoted in Jessica Lyons Hardcastle&#8217;s <a href=\"https:\/\/www.theregister.com\/2023\/01\/18\/washington_period_tracking_apps\/\">Proposed Washington law puts period-tracking apps on notice<\/a> in The Register <\/p><\/blockquote>\n<p>The <strong>My Health My Data Act (<a href=\"https:\/\/app.leg.wa.gov\/billsummary?BillNumber=1155&amp;Year=2023&amp;Initiative=false\">HB 1155<\/a> \/ <a href=\"https:\/\/apps.leg.wa.gov\/billsummary?BillNumber=5351&amp;Chamber=Senate&amp;Year=2023\">SB 5351<\/a>), <\/strong>which Rep. Slatter is sponsoring along with Sen. Manka Dhingra, responds to the Dobbs decision by providing strong protections for consumer health data. \u00a0Shawna Mizelle&#8217;s <a href=\"https:\/\/www.cnn.com\/2023\/01\/18\/politics\/washington-state-period-tracking-apps\/index.html\">Washington state bill would make period-tracking apps follow privacy laws in reflection of post-Roe fears<\/a> on <em>CNN <\/em>also discusses the bill \u2013 which covers a lot more than period-tracking apps!<\/p>\n<p>Slatter and Dhingra worked with the Attorney General&#8217;s office developing the bill, and there is a <em>lot <\/em>to like about it. Here&#8217;s how the <a href=\"https:\/\/www.atg.wa.gov\/news\/news-releases\/ag-ferguson-rep-slatter-sen-dhingra-propose-legislation-protect-washingtonians\">AG&#8217;s press release in October<\/a> describes its key features:<\/p>\n<ul>\n<li>Prohibits organizations from selling Washingtonians\u2019 health data.<\/li>\n<li>Blocks apps and websites \u2014 like health tracking apps, search engines and advertisers \u2014 from collecting and sharing Washingtonians\u2019 health data without their consent.<\/li>\n<li>Prohibits \u201cgeofences\u201d from being used at reproductive and gender affirming health care facilities. Geofences are a virtual perimeter around a physical location that can be used to send messages to a person who enters a specific location.<\/li>\n<\/ul>\n<p>Each of these would be significant advances over existing state privacy laws so there are going to be a lot of lobbyists pushing for weaker protections. \u00a0That said, there&#8217;s room for strengthening as well. \u00a0For example, the bill currently exempts de-identified data, which Sen. Ron Wyden has warned could put people seeking reproductive health care at risk. \u00a0<\/p>\n<p>At the hearing and behind the scenes, expect the <a href=\"https:\/\/themarkup.org\/privacy\/2022\/05\/26\/tech-industry-groups-are-watering-down-attempts-at-privacy-regulation-one-state-at-a-time\">tech industry groups<\/a> and <a href=\"https:\/\/www.protocol.com\/policy\/state-privacy-utah-spsc\">lobbyists who water down state privacy laws<\/a> to try to narrow the definitions of consumer health data, introduce more loopholes and exemptions, and weaken enforcement by claiming that holding companies accountable for the harms they cause by not protecting people&#8217;s data will &#8220;harm innovation&#8221; or cause the sky to fall.<\/p>\n<p>Microsoft is a wild card and it will be interesting to hear what they have to say. Many of their customers would benefit from a weaker bill, but strong legislation would be good for their business \u2013 and they&#8217;ll face a lot of employee pressure if they aren&#8217;t pushing for it.<\/p>\n<blockquote><p><strong>UPDATE, January 28: <\/strong><a href=\"__GHOST_URL__\/my-health-my-data-encouraging-first-step\/\">A very encouraging first step<\/a> summarizes the House Civil Rights &amp; Judiciary (CR&amp;J) hearing on My Health My Data; <a href=\"https:\/\/threadreaderapp.com\/thread\/1617945841016373248.html\">my live-tweeting has more details<\/a>. \u00a0There was great testimony supporting the bill from reproductive freedom, gender justice, health care provider and patient, immigrant, and tech perspectives \u2013 in fact there was so much support for the bill that Chair Hansen cut off testimony before WA People&#8217;s Privacy and several grassroots activists with a technology background could testify which was really unfortunate.<sup><a href=\"#notes\">2<\/a><\/sup> \u00a0Meanhile industry did as expected: testified OTHER, supported the bill&#8217;s goals, warned that it would cause the sky to fall, critiqued the bill in the ways I predicted as well as suggesting introducing a get-out-of-jail free card (the &#8220;right to cure&#8221;),<sup>3<\/sup> \u00a0removing the &#8220;per se&#8221; clause<sup>4<\/sup> and allowing some geofencing as long as it wasn&#8217;t &#8220;precise&#8221;. \u00a0Next step is a potential executive session on Wednesday February 1 where they will consider amendments and vote on whether to advance the bill.<\/p><\/blockquote>\n<blockquote><p><strong>UPDATE, February 4:<\/strong> \u00a0CR&amp;J advanced a weakened substitute version of the bill on a party-line vote (although one Democrat said she&#8217;d vote against it on the floor unless it were further weakened). <a href=\"__GHOST_URL__\/a-watered-down-substitute-advances\/\">A watered-down substitute advances<\/a> discusses the changes in more detail.<\/p><\/blockquote>\n<p><!--kg-card-begin: html--><a id=\"PeoplesPrivacyAct\"><\/a><\/p>\n<h2>The People&#8217;s Privacy Act: closer to a hearing than it&#8217;s ever been<\/h2>\n<p><!--kg-card-end: html--><\/p>\n<figure class=\"kg-card kg-embed-card kg-card-hascaption\"><iframe loading=\"lazy\" width=\"200\" height=\"113\" src=\"https:\/\/www.youtube.com\/embed\/8oLFV0EAgWs?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" allowfullscreen title=\"People&#39;s Privacy Act: Protecting Washingtonians&#39; Privacy, Washington Indivisible Network Town Hall\"><\/iframe><figcaption>ACLU webinar on the People&#8217;s Privacy Act, 2021. <a href=\"https:\/\/docs.google.com\/presentation\/d\/e\/2PACX-1vQqH8q9rE3yy5NVglh2WfOSh_hQO1EJ3_qcUlXD_ty_tL-Qx5kJUGhkS_K0BoP4H3fU1SlNrIM9xNai\/pub#slide=id.g8c2c1d9496_0_57\">Here&#8217;s the slides.<\/a><\/figcaption><\/figure>\n<p>The <a href=\"https:\/\/www.aclu-wa.org\/story\/introducing-people%E2%80%99s-privacy-act-real-privacy-protections-everyone\"><strong>People&#8217;s Privacy Act<\/strong><\/a><strong> <\/strong> (<a href=\"https:\/\/app.leg.wa.gov\/billsummary?BillNumber=1616&amp;Year=2023&amp;Initiative=false\">HB 1616<\/a> \/ SB 5463), introduced by Rep. Shelley Kloba \u00a0(with bipartisan co-sponsorship) and Sen. Bob Hasegawa, broadens My Health My Data&#8217;s opt-in consent requirements to other personal data \u2013 and covers government agencies as well as the private sector. \u00a0<\/p>\n<p>In addition, the People&#8217;s Privacy Act also<\/p>\n<ul>\n<li>makes it unlawful for companies and government agencies to use people\u2019s personal information to discriminate<\/li>\n<li>bans facial recognition technology and AI-enabled profiling in any place of public accommodation (e.g., restaurants, hotels, theaters, pharmacies, parks, schools, and stores)<\/li>\n<\/ul>\n<p>ACLU&#8217;s <a href=\"https:\/\/www.aclu-wa.org\/story\/introducing-people%E2%80%99s-privacy-act-real-privacy-protections-everyone\">Introducing the People\u2019s Privacy Act: Real Privacy Protections for Everyone<\/a>, from 2021, has more details of the previous version; I haven&#8217;t looked in any detail yet at this year&#8217;s version, but from my understanding it&#8217;s mostly similar.<\/p>\n<p>The tech industry really doesn&#8217;t want discussion of bills like this \u2013 it highlights how weak bills like the Bad WPA are by comparison \u2013 and thus far has been successfully using its influence to block discussion. \u00a0The People&#8217;s Privacy Act didn&#8217;t get a hearing in either of the last two years, which is kind of disappointing since it&#8217;s had broad support from privacy, civil rights, immigrant rights, and civil liberties organizations ever since Rep. Shelley Kloba first introduced it in 2021. \u00a0<\/p>\n<p>Again, though, it&#8217;s a more favorable environment in 2023. \u00a0Since last session, dozens of civil rights, privacy, and public interest groups wrote to Congress and submitted FTC comments about the importance of anti-discrimination protections and privacy as a civil right that align very much with the People&#8217;s Privacy Act \u2013 and it also aligns well with My Health My Data&#8217;s emphasis on opt-in consent. \u00a0<\/p>\n<p>So hopefully third time&#8217;s a charm and the People&#8217;s Privacy Act <em>will <\/em>get a hearing this year. \u00a0If and when that happens, expect tech industry to claim that it will cause the sky to fall and press to weaken it. \u00a0Amidst the overwrought objections, there may also be some legitimate areas for improvement. Privacy advocates are likely to be supportive, and some may even push to strengthen it \u2013 for example introduce a duty of loyalty, or broaden it to include employee protections similar to the recently-introduced Massachusetts Data Privacy and Protection Act. <\/p>\n<p><!--kg-card-begin: html--><a id=\"ShieldLaw\"><\/a><\/p>\n<h2>The Shield Law: &#8220;Concerning access to reproductive health care services and gender-affirming treatment in Washington state.&#8221;<\/h2>\n<p><!--kg-card-end: html--><\/p>\n<p>The Shield Law (SB 5489 \/ HR 1469), introduced by Sen. Yasmin Trudeau and Rep. Drew Hansen, would protect abortion providers, patients, and helpers in Washington state by putting up barriers to out-of-state investigations from states that criminalize \u00a0providing or accessing abortion or gender-affirming care in Washington state. <\/p>\n<p>Here&#8217;s how Pro-Choice Washington describes it:<\/p>\n<blockquote><p>&#8220;With the loss of <em>Roe v. Wade<\/em>, patients from states with abortion bans now rely on states like Washington to provide the care they need. In fact, the Guttmacher Institute estimates that there will be 385% more out-of-state patients expected to seek abortions in Washington than before Roe was overturned. But providers and patients face frightening uncertainty about whether they could be criminalized for seeking or providing legal abortion care in Washington. By passing a shield law, Washington can provide lifesaving refuge to patients and protect the health care workers who provide these vital services.<\/p><\/blockquote>\n<p>Legal Voice and ACLU of Washington also support this bill. \u00a0It had hearings on Tuesday, January 24 at 10:30 am in the Senate Law &amp; Justice Committee and House Civil Rights &amp; Judiciary Committee. \u00a0Later that week, Senate Law &amp; Justice advanced the original bill without amendments; House Civil Rights &amp; Judiciary advanced a substitute with <a href=\"https:\/\/app.leg.wa.gov\/committeeschedules\/Home\/Document\/249819#toolbar=0&amp;navpanes=0\">a fair number of changes<\/a>. \u00a0<\/p>\n<p><!--kg-card-begin: html--><a id=\"ADS\"><\/a><\/p>\n<h2>Automated Decision Systems (ADS) Regulation<\/h2>\n<p><!--kg-card-end: html--><\/p>\n<figure class=\"kg-card kg-embed-card kg-card-hascaption\"><iframe loading=\"lazy\" width=\"200\" height=\"113\" src=\"https:\/\/www.youtube.com\/embed\/5m0W7GoaoF4?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" allowfullscreen title=\"What are Automated Decision Systems and why you should care?\"><\/iframe><figcaption>What are Automated Decision Systems and why you should care: a webinar by Washington State Chief Privacy Officer Katy Ruckle and me<\/figcaption><\/figure>\n<p>Also important from a privacy and tech justice perspective is \u00a0Sen. Bob Hasegawa&#8217;s <strong>Automated Decision Systems (ADS) Regulation<\/strong>, which establishes minimum standards for fairness, accountability, and transparency in government use of these systems. \u00a0Tech Equity Coalition groups and other privacy advocates have supported this bill since it was first introduced in 2021; several, including me, worked with agency leads on the state <a href=\"https:\/\/watech.wa.gov\/privacy\/projects-and-initiatives\">Automated Decision Systems workgroup<\/a>. In the video above, Washington State Chief Privacy Officer Katy Ruckle and I discuss the recommendations and the current work inventorying state ADS systems.<\/p>\n<p>While state governemnt agencies agreed with the recommendations in the workgroup report, they pushed back on the 2022 version of the ADS bill, arguing that it would put the systems our state government depends on at risk. \u00a0Sen. Hasegawa&#8217;s made some revisions, hopefully addressing their concerns. \u00a0And since the last session, a litany of stories of algorithmic abuses has kept the spotlight on the issue, and the White House Office of Science and Technology Policy&#8217;s Draft AI Bill of Rights has provided strong recommendations for ADS regulation. \u00a0<\/p>\n<p>ADS Regulation has been assigned to the Senate Energy, Environment, and Technology committee, unlike last year when it went to State Government. \u00a0ENET&#8217;s chaired by Sen. Joe Nguyen, and it&#8217;s not clear what he thinks of the bill. We&#8217;ll see how things go.<\/p>\n<h2 id=\"stay-tuned\">Stay tuned!<\/h2>\n<p>Bills are supposed to advance through their initial committee by Friday, February 17, so the picture will start to come into focus fairly quickly (although there are ways for bills can stay alive even if they miss deadlines). \u00a0This session ends on Sunday April 23, and privacy legislation has gone down to the wire the last four years. \u00a0It ain&#8217;t over &#8217;til it&#8217;s over!<\/p>\n<p>Right now, though, it&#8217;s not even close to being over \u2013 in fact we&#8217;ve only just started. \u00a0Stay tuned! \u00a0<\/p>\n<h2 id=\"references\">References<\/h2>\n<h3 id=\"2022\">2022<\/h3>\n<p><strong>Narrative<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/wa-privacy.net\/2022-leg-priview\/\">It\u2019s time for Washington to pass strong privacy legislation!<\/a><\/li>\n<li><a href=\"https:\/\/wa-privacy.net\/legislation-update-021422\/\">WA Privacy Legislation Update \u2013 February 14 \ud83d\udc98<\/a><\/li>\n<li><a href=\"https:\/\/wa-privacy.net\/the-situation-is-fluid\/\">The situation is \u2026 fluid \u2013 March 4 (late-night update)<\/a><\/li>\n<li><a href=\"https:\/\/wa-privacy.net\/it-aint-over-till-its-over\/\">It ain\u2019t over till it\u2019s over \u2013 March 7-10 <\/a><\/li>\n<\/ul>\n<p><strong>Op-eds and open letters<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/wa-privacy.net\/tech-equity-coalition-letter-021422\/\">Tech Equity Coalition letter to the Washington state House of Representatives<\/a><\/li>\n<li><a href=\"https:\/\/indipluswa.medium.com\/indivisble-privacy-letter-to-crj-committee-january-24-c4b39150d8e3\">Indivisble privacy letter to CRJ committee, January 24<\/a><\/li>\n<li><a href=\"https:\/\/www.kitsapsun.com\/story\/opinion\/readers\/2022\/01\/30\/support-legislation-enacts-data-privacy\/9261220002\/\">Support legislation that enacts data privacy<\/a>, Carollynn Zimmers, <em>Kitsap Sun<\/em><\/li>\n<li><a href=\"https:\/\/www.heraldnet.com\/opinion\/data-privacy-bills-favor-tech-companies-over-people\/\">Data privacy bills favor tech companies over people<\/a>, Naomi Dietrich, <em>Everett Herald<\/em><\/li>\n<li><a href=\"https:\/\/southseattleemerald.com\/2022\/02\/24\/opinion-tech-companies-want-to-write-their-own-rules-on-data-privacy-dont-let-them\/\">Tech Companies Want to Write Their Own Rules on Data Privacy. Don\u2019t Let Them<\/a>, Hillary Hayden and Brianna Auffray, <em>South Seattle Emerald<\/em><\/li>\n<li><a href=\"https:\/\/www.aclu-wa.org\/story\/fact-check-was-leadership-privacy-legislation#overlay-context=\">Fact Check: WA\u2019s Leadership on Privacy Legislation<\/a>, Jennifer Lee and Maya Morales<\/li>\n<li><a href=\"https:\/\/wa-privacy.net\/affliates-loophole\/\">A Deep Dive into the Affiliates Loophole<\/a><\/li>\n<\/ul>\n<p><strong>Federal privacy legislation<\/strong><\/p>\n<ul>\n<li>Washington Indivisible groups&#8217; June 13 <a href=\"https:\/\/medium.com\/@indipluswa\/indivisible-letter-to-sen-cantwell-and-rep-mcmorris-rodgers-on-federal-privacy-legislation-8071ba1d350e\">Letter to Sen. Cantwell and Rep. McMorris Rodgers on federal privacy legislation<\/a><\/li>\n<li>WA People&#8217;s Privacy founder Maya Morales&#8217; <a href=\"https:\/\/wapeoplesprivacy.org\/our-public-comment-in-historic-ccpa-meeting\/\">Comments at California Privacy Protection Agency board meeting<\/a><\/li>\n<li>Washington Indivisible groups&#8217; September 14 <a href=\"https:\/\/medium.com\/@indipluswa\/washington-indivisible-federal-privacy-one-pager-add67a8c1453\">Privacy one-pager<\/a> <\/li>\n<li>Washington Indivisible groups November 28 letter: <a href=\"https:\/\/medium.com\/@indipluswa\/washington-indivisibles-please-only-advance-adppa-if-it-is-strengthened-significantly-9701286f7c07\">Please only advance ADPPA if it is strengthened significantly<\/a><\/li>\n<li>WA People&#8217;s Privacy-led November 30 letter to Rep. Jayapal and the Progressive Caucus: <a href=\"https:\/\/wapeoplesprivacy.org\/about\/fanfsaletter11-30-2022\/\">Please Co-sponsor &amp; Pass the Fourth Amendment Is Not For Sale Act<\/a><\/li>\n<li>WA People\u2019s Privacy-led December 17 letter to Speaker Pelois: <a href=\"https:\/\/wapeoplesprivacy.org\/about\/addpaletter-pelosi-12-16-22\/\">Request to block H.R. 8152, ADPPA, from a floor vote unless it is first strengthened in the specific ways enclosed<\/a><\/li>\n<li>Washington privacy advocates letter to the WA Congressional delegation: <a href=\"https:\/\/wa-privacy.net\/thank-you-for-not-passing-adppa\/\">Thank you for not passing ADPPA this session \u2013 and we look forward to working with you on privacy in 2023<\/a><\/li>\n<\/ul>\n<h3 id=\"2021\">2021<\/h3>\n<p><strong>Narrative<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/jedii.tech\/wa-privacy-legislation-2021\/\">The stakes are high: Washington state privacy, facial recognition, and automated decision making legislation 2021<\/a><\/li>\n<li><a href=\"https:\/\/www.seattletimes.com\/seattle-news\/politics\/european-style-data-privacy-bill-returns-as-washington-state-lawmakers-ponder-new-regulations\/\">European-style data privacy bill returns<\/a> (Joseph O\u2019Sullivan, <em>Seattle Times<\/em>), discussing the Senate hearing<\/li>\n<li><a href=\"https:\/\/jedii.tech\/criticism-and-praise-for-at-the-hearing-for-sb-5062-the-bad-washington-privacy-act\/\">Criticism and praise at the hearing for SB 5062 (the Bad Washington Privacy Act)<\/a><\/li>\n<li><a href=\"https:\/\/wildwest.substack.com\/p\/inside-one-states-fierce-battle-over\">Inside One State\u2019s Fierce Battle Over Online Privacy<\/a> (Eli Sanders, <em>Wild West)<\/em><\/li>\n<li><a href=\"https:\/\/www.geekwire.com\/2021\/industry-backed-digital-privacy-bill-sees-head-spinning-changes-washington-state\/\">Industry-backed digital privacy bill sees head-spinning changes in Washington state<\/a> (Eli Sanders, <em>GeekWire<\/em>)<\/li>\n<li><a href=\"https:\/\/jedii.tech\/the-clock-ticks-down-on-the-bad-wpa\/\">The Clock Ticks Down on the Bad Washington Privacy Act<\/a><\/li>\n<li><a href=\"https:\/\/iapp.org\/news\/a\/washington-privacy-act-fails-for-third-straight-year\/\">Washington Privacy Act goes 0 for 3<\/a>, perspectives from lobbyists Jim Halpert of DLA Piper and Samantha Kersul of TechNet<\/li>\n<li><a href=\"https:\/\/wildwest.substack.com\/p\/a-digital-privacy-bill-dies-in-washington\">A Digital Privacy Bill Dies in Washington<\/a> (Eli Sanders, <em>Wild West<\/em>)<\/li>\n<\/ul>\n<p><strong>Op-eds and letters to the editor<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/www.seattletimes.com\/opinion\/con-the-peoples-privacy-act-not-the-washington-privacy-act-is-the-better-bill-to-protect-consumers-civil-rights-and-civil-liberties\">The People\u2019s Privacy Act, not the Washington Privacy Act, is the better bill to protect consumers\u2019 civil rights and civil liberties<\/a>, Jennifer Lee of ACLU of Washington, <em>Seattle Times<\/em><\/li>\n<li><a href=\"https:\/\/demcastusa.com\/2021\/04\/10\/real-electronic-data-protection-is-opt-in\/\">Real Electronic Data Protection Is Opt In<\/a> , Brandy Donaghy, <em>Demcast<\/em><\/li>\n<li><a href=\"https:\/\/iexaminer.org\/interims-corner-the-washington-privacy-act-insufficient-for-the-immigrant-refugee-communities-we-serve\/\">The Washington Privacy Act: Insufficient for the immigrant, refugee communities we serve<\/a>, Derek Lum of Interim CDA in the<em> International Examiner<\/em><\/li>\n<li><a href=\"https:\/\/www.aclu-wa.org\/story\/silence-not-consent\">Silence is Not Consent<\/a> by Emilie St. Pierre of Future Ada<\/li>\n<li><a href=\"https:\/\/jedii.tech\/the-bad-washington-privacy-act-an-illusion-of-rights-and-as-cher-would-say-what-a-monet\/\">The Bad Washington Privacy Act: An Illusion of Rights And As Cher Would Say, \u201cWhat a Monet\u201d<\/a> Deborah Pierce<\/li>\n<li><a href=\"https:\/\/jedii.tech\/the-illusion-of-protection\/\">The illusion of protection and SB 5062 (the Bad Washington Privacy Act)<\/a><\/li>\n<li><a href=\"https:\/\/ngreggbrown.medium.com\/the-washington-privacy-act-not-a-model-for-state-privacy-law-5a484813ab2e\">The Washington Privacy Act: Not a model for state privacy law<\/a>, N. Gregg Brown<\/li>\n<li><a href=\"https:\/\/www.jdsupra.com\/legalnews\/data-privacy-unlocked-a-conversation-wi-67790\/\">Data Privacy Unlocked, A Conversation with Representative Shelley Kloba of Washington State<\/a>, a podcast on JD Supra, July 2021<\/li>\n<\/ul>\n<h3 id=\"2020\">2020<\/h3>\n<ul>\n<li> <a href=\"https:\/\/medium.com\/a-change-is-coming\/a-bad-day-for-a-bad-privacy-bill-a-good-day-for-privacy-a2aeea8e8739\">A bad day for a bad privacy bill, a good day for privacy<\/a> : the House Civil Rights and Judiciary Committee hearing on the Bad Washington Privacy Act<\/li>\n<li><a href=\"https:\/\/medium.com\/a-change-is-coming\/significant-progress-although-still-a-ways-to-go-sb-6280-sb-6281-update-82972ab8536d\">Significant progress, although still a ways to go (SB 6280\/SB 6281 update)<\/a><\/li>\n<li><a href=\"https:\/\/iapp.org\/news\/a\/washington-privacy-act-fails-for-second-time\/\">Washington Privacy Act fails for second time<\/a>, with perspectives from Sen Carlyle and Republican Rep. Norma Smith (R-10, long-time privacy champion who retired after the session).<\/li>\n<\/ul>\n<h3 id=\"industry-lobbying-strategy\">Industry lobbying strategy<\/h3>\n<ul>\n<li><a href=\"https:\/\/www.grid.news\/story\/technology\/2022\/04\/11\/big-tech-turns-to-an-old-industry-playbook-when-passing-state-privacy-legislation\/\" rel=\"noopener ugc nofollow\">How Big Tech is quietly pushing for watered-down state privacy laws<\/a>(Benjamin Powers on <em><em>Grid<\/em><\/em>)<\/li>\n<li><a href=\"https:\/\/themarkup.org\/privacy\/2022\/05\/26\/tech-industry-groups-are-watering-down-attempts-at-privacy-regulation-one-state-at-a-time\" rel=\"noopener ugc nofollow\">Tech Industry Groups Are Watering Down Attempts at Privacy Regulation, One State at a Time<\/a> (Todd Feathers and Alfred Ng on <em><em>The Markup<\/em><\/em>)<\/li>\n<li><a href=\"https:\/\/www.reuters.com\/investigates\/special-report\/amazon-privacy-lobbying\/\" rel=\"noopener ugc nofollow\">The Amazon lobbyists who kill U.S. consumer privacy protections<\/a>(Jeffrey Dastin, Chris Kirkham, Aditya Kalra on <em><em>Reuters<\/em><\/em>)<\/li>\n<li><a href=\"https:\/\/themarkup.org\/privacy\/2021\/04\/15\/big-tech-is-pushing-states-to-pass-privacy-laws-and-yes-you-should-be-suspicious\" rel=\"noopener ugc nofollow\">Big Tech Is Pushing States to Pass Privacy Laws, and Yes, You Should Be Suspicious<\/a> (Todd Feathers on The <em><em>Markup<\/em><\/em>)<\/li>\n<\/ul>\n<h2 id=\"notes\">Notes<\/h2>\n<p><sup>1<\/sup> although the Bad Washington Privacy Act has been more successful elsewhere \u2013 it&#8217;s the basis for Virginia&#8217;s, Colorado&#8217;s, and Connecticut&#8217;s privacy bills).<\/p>\n<p><sup>2<\/sup> Just as Chair Hansen did at Civil Rights &amp; Judiciary committee hearing on the Bad Washington Privacy Act two years ago &#8230; hey wait a second, I&#8217;m noticing a pattern here!<\/p>\n<p><sup>3<\/sup> Consmer Reports used the &#8220;get-out-of-jail free card&#8221; analogy in their 2021 letter, and AG Ferguson has previously described the right-to-cure as &#8220;anti-consumer&#8221;. But industry insists on having this fight every year. \u00a0<\/p>\n<p><sup>4<\/sup> They never give up, do they? \u00a02020&#8217;s <a href=\"https:\/\/medium.com\/a-change-is-coming\/a-bad-day-for-a-bad-privacy-bill-a-good-day-for-privacy-a2aeea8e8739\">A bad day for a bad privacy bill, a good day for privacy<\/a> includes an excerpt of Andrea Alegrett&#8217;s testimony on why the Bad Washingtonn Privacy Act&#8217;s lack of a &#8220;per se&#8221; clause made it unenforceable. Industry conceded on this in 2021 and that year&#8217;s version of Bad Washington Privacy Act included a per se clause so it is disappointing that they had their fingers crossed &#8230; although not surprising. \u00a0Footnote 2 in <a href=\"__GHOST_URL__\/the-elephant-and-the-lame-duck\/\">The elephant and the lame duck: ADPPA after the midterms (a federal privacy legislation update)<\/a> discusses how the per se issue came up last summer (and will probably come back up again soon) in the proposed American Data Privacy Protection Act. <\/p>\n<h2 id=\"update-log\">Update log<\/h2>\n<p><em>Note: I&#8217;ve also made typo fixes and minor wording changes along the way without adding them here.<\/em><\/p>\n<p>January 11 . \u00a0Originally published as &#8220;A much more favorable environment,&#8221; before several of the bills had officially been introduced<\/p>\n<p>January 22-23: Revised as &#8220;A much more favorable environment, but a lot of complexity&#8221;<\/p>\n<p>January 28: Updated baed on My Health My Data and Shield Law hearings<\/p>\n<p>February 4: Mention that My Health My Data advanced, add ADS section. \u00a0I had originally written this when I first published the article but the ADS bill&#8217;s prospects were so uncertain, that I took it out. \u00a0Now that the bill&#8217;s likely to get a hearing, I put it back.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last updated February 4. \u00a0See the update log below. Washington is justifiably looked to as a tech-savvy state, and legislation that gets passed here will influence other states and the national debate. \u2013 me in The stakes are high: Washington state privacy, facial recognition, and automated decision systems legislation 2021 The 2023 Washington state legislative [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[475,474,461,473,476],"class_list":["post-4178","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-waleg","tag-my-health-my-data","tag-privacy-after-roe","tag-state-privacy-legislation","tag-washington-state-privacy-legislation"],"_links":{"self":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts\/4178","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/comments?post=4178"}],"version-history":[{"count":0,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/posts\/4178\/revisions"}],"wp:attachment":[{"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/media?parent=4178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/categories?post=4178"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2024.thenexus.today\/index.php\/wp-json\/wp\/v2\/tags?post=4178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}