Last Week in Privacy — March 19, 2019

OneTrust brings us the top news of the last week in the privacy industry, including the introduction of a new federal bill that would require companies to obtain consent before collecting or sharing facial-recognition data and a recent freedom-of-information request that was filed with the U.K. Information Commissioner's Office that revealed that prior to the EU General Data Protection Regulation, businesses waited an average of three weeks after detecting a breach before reporting it to authorities.