Greetings, everyone.
The biggest development in privacy this week was undoubtedly the news that Virginia became the second state following California to pass comprehensive privacy legislation, with its enactment of the Consumer Data Protection Act. The bill passed despite opposition from five privacy advocacy groups, including the Electronic Frontier Foundation, which called it a “weak” privacy bill and contended it “really protects the interests of business far more than the interests of everyday consumers.”
The CDPA aims to provide many Virginia residents with the rights to access, correct, delete, data portability, opt out and appeal, while placing obligations on certain entities that conduct business in Virginia, involving limits on collection and use, technical safeguards, data-processing agreements, and privacy policies. IAPP Westin Fellow Sarah Rippy wrote an in-depth analysis that provides much-needed insight into the new law — although, as she points out, its substance is not particularly new to privacy professionals.
Given how much activity there has been at the state-level around privacy, our State Tracker (also kept up-to-date by Sarah) has become an even more essential resource providing a bird’s-eye view into privacy developments happening at state capitols around the country.
As more and more state Legislatures debate the passage of comprehensive privacy legislation, Congress is also poised to enact more privacy regulations, including the use of facial recognition technologies. As legislative developments like these continue, momentum also seems to be building for Congress to enact a consistent set of privacy rules and enforceable rights for American consumers at the federal level. Whether or when such a law will be passed, though, remains highly uncertain.
Before you sign off for the weekend, do not forget to mark your calendars for two important events.
Be sure to register for the WSJ Pro webinar March 10 when IAPP Research Director Caitlin Fennessy will discuss “What’s Next for Privacy Shield?” with London Stock Exchange Group Chief Privacy Officer Vivienne Artz and NOYB Honorary Chairman Max Schrems.
Also, on International Women’s Day, March 8, join “Women Leading Tech and Privacy: Celebrating achievements, setting new goals.” This LinkedIn panel will be moderated by Dominique Shelton Leipzig and features Julie Brill, Kalinda Raina, Nicole Wong and Anna Zeiter for a discussion focused on gender equality in privacy and technology and ways to improve diversity and inclusion in the ranks of privacy professionals.
Wishing you all an early, happy International Women’s Day!