Metropolitan Digital

The Conversation

  • Written by Jeff Sovern, Professor of Law, St. John's University

Supreme Court Justice Louis Brandeis called privacy the “right to be let alone[1].” Perhaps Congress should give states trying to protect consumer data the same right.

For years, a gridlocked Congress ignored privacy, apart from occasionally scolding companies such as Equifax[2] and Marriott[3] after their major data breaches. In its absence, states have taken the lead in experimenting with privacy-related laws.

California, for example, recently passed legislation[4] giving citizens the right to know what data businesses have on them – and to block the information’s sale to third parties. It’s the first of its kind[5] in the U.S. and has prompted lawmakers[6] in other states to try to follow suit.

That’s gotten the attention of businesses, especially in tech, which have been lobbying Congress[7] to preempt a possible patchwork of state laws with what could amount to a weaker federal one. Some observers predict[8] this could be that rare issue that inspires bipartisan compromise in Congress this year.

Sounds like great news, right?

Wrong.

As someone who has studied privacy for nearly two decades[9], I believe consumers are better off if Congress doesn’t intrude and lets states keep experimenting on how to best protect Americans’ personal data.

Following California’s lead

It may be hard to remember, but there was a time when companies were able to keep data breaches secret, so that consumers didn’t even know hackers had their information and that they needed to take steps to protect themselves.

Then California’s data breach law[10] took effect in 2003. California requires companies that suffer data breaches to notify affected consumers as well as the state’s attorney general.

As lawmakers elsewhere learned from these notifications just how common data breaches had become, the other 49 states followed suit[11]. The result is that more than 8,000 data breaches affecting more than 11 billion records[12] have been made public – and all without Congress doing a thing.

If states had not acted on their own, Americans might never have learned about the Equifax or Marriott breaches, or about the 1,244 breaches affecting 446 million records that occurred just last year[13].And just as other states followed California on breaches, some are attempting to do the same on privacy legislation.

The California Consumer Privacy Act[14], which will take effect next year, will give Californians the right to learn what companies know about them and the kinds of businesses they sell that information to, as well as the right to block such sales. Consumers will also be able to require companies to delete information on them in some circumstances.

Legislators in states[15] including Massachussetts[16], Washington[17] and New York[18] have introduced similar privacy bills this year.

Congress is considering privacy legislation – be afraid California has taken the lead on protecting consumer data. AP Photo/Don Thompson[19]

Congressional intrusion

But Congress could bring this experimentation to a halt if lawmakers enact a weaker privacy bill that overrides state laws, as industry lobbyists are seeking[20].

Congress frequently preempts state laws. For example, the federal arbitration law[21] prevents states from regulating arbitration agreements, even barring states from merely requiring[22] that contracts require arbitration on the first page.

I don’t mean to say that there’s no room for Congress to get involved. Most Americans still lack important privacy protections, and Congress could help fill that gap.

But rather than circumventing state laws, a federal privacy law should work in partnership with them – just as federal laws regulating auto safety such as airbag requirements[23] operate in tandem with state regulations that govern related issues such as how fast motorists can drive.

Industry advocates, however, don’t want federal and state laws to exist side by side because they say companies will have trouble following the rules of different states. Businesses had the same concerns about state data breach laws, and testimony from Marriott’s CEO[24] suggests the company didn’t find it too troublesome to comply with them, however different.

It’s more likely, then, that companies realize that it will be easier for their lobbyists to win a victory in one legislature – Congress – than in 50 states.

Lobbyists have also argued[25] consumers would be bewildered by such a patchwork of state privacy laws. They claimed[26], for example, that a consumer driving from Biloxi, Mississippi, to Bellevue, Washington, would be confused by the different privacy regimes she would encounter.

But that same person – during that same drive – copes with a wide variety of traffic laws. Drivers seem to be able to navigate those different laws just fine.

New tech, new threats to privacy

Another concern is that technology is continually improving, with each new advance creating a new privacy challenge for consumers that they cannot now foresee.

Biometrics is an example of an issue that only in recent years has become a serious privacy concern. It’s one thing to use facial recognition software to unlock your phone, another if companies are able to buy your image so they can tailor the ads[27] you see to what you look like.

Illinois was at the forefront of innovation when in 2008 it passed a statute[28] that prevents companies from selling information about consumers’ fingerprints, retina scans, voiceprints and similar items and requires companies to notify consumers before capturing biometric information. Other states, like Texas[29] and Washington state[30], have since enacted similar laws.

Congress is considering privacy legislation – be afraid Louis Brandeis dubbed privacy the ‘right to be left alone.’ AP Photo[31]

But it’s another reason a federal privacy law preventing states from experimenting may be worse than no federal law at all. Federal preemption would mean states could no longer respond to threats to privacy. And consumers would have only Congress to turn to for a remedy. Given that the last major consumer privacy law[32] at the federal level is already two decades old, it’s hard to believe the frequently frozen Congress would keep up with the times.

Worse, consumers would risk losing their only bargaining chip in the fight over their personal data: companies’ fear that states might put a stop to whatever they’re doing.

Brandeis, a prophet on privacy[33], called[34] the states the “laboratories of democracy.” Let’s see what results the labs produce before we stop experimenting – and risk learning the best solutions.

References

  1. ^ right to be let alone (faculty.uml.edu)
  2. ^ Equifax (www.nytimes.com)
  3. ^ Marriott (www.washingtonpost.com)
  4. ^ recently passed legislation (www.nbcnews.com)
  5. ^ first of its kind (store.law.com)
  6. ^ has prompted lawmakers (www.natlawreview.com)
  7. ^ have been lobbying Congress (www.reuters.com)
  8. ^ predict (www.brookings.edu)
  9. ^ someone who has studied privacy for nearly two decades (papers.ssrn.com)
  10. ^ California’s data breach law (leginfo.legislature.ca.gov)
  11. ^ other 49 states followed suit (www.ncsl.org)
  12. ^ more than 8,000 data breaches affecting more than 11 billion records (www.privacyrights.org)
  13. ^ 1,244 breaches affecting 446 million records that occurred just last year (www.idtheftcenter.org)
  14. ^ California Consumer Privacy Act (cal-privacy.com)
  15. ^ Legislators in states (iapp.org)
  16. ^ Massachussetts (www.clarip.com)
  17. ^ Washington (www.mediapost.com)
  18. ^ New York (www.bleepingcomputer.com)
  19. ^ AP Photo/Don Thompson (www.apimages.com)
  20. ^ industry lobbyists are seeking (www.commerce.senate.gov)
  21. ^ federal arbitration law (www.law.cornell.edu)
  22. ^ barring states from merely requiring (caselaw.findlaw.com)
  23. ^ airbag requirements (legisworks.org)
  24. ^ testimony from Marriott’s CEO (www.hsgac.senate.gov)
  25. ^ Lobbyists have also argued (www.commerce.senate.gov)
  26. ^ They claimed (www.commerce.senate.gov)
  27. ^ tailor the ads (www.goodeintelligence.com)
  28. ^ passed a statute (www.ilga.gov)
  29. ^ Texas (codes.findlaw.com)
  30. ^ Washington state (app.leg.wa.gov)
  31. ^ AP Photo (www.apimages.com)
  32. ^ last major consumer privacy law (www.congress.gov)
  33. ^ prophet on privacy (www.cs.cornell.edu)
  34. ^ called (supreme.justia.com)

Authors: Jeff Sovern, Professor of Law, St. John's University

Read more http://theconversation.com/congress-is-considering-privacy-legislation-be-afraid-116938

Metropolitan republishes selected articles from The Conversation USA with permission

Visit The Conversation to see more

Entertainment News

Phish’s 2018 Fall Tour to Conclude with Four Performances at MGM Grand Garden Arena

LAS VEGAS (May 15, 2018) – Phish, the American rock band known worldwide for its dedicated fan base, recently announced a 14-date Fall tour which will conclude in Las Vegas with four performances at...

Blane Ferguson - avatar Blane Ferguson

Dave Damiani and The No Vacancy Orchestra are “Bending The Standard”

Tina Sinatra, Dave Damiani & Landau Murphy Jr. celebrate 100 years of Frank Sinatra in Los Angeles There have been stories about independent filmmakers, but how about the independent big band...

Tom Estey - avatar Tom Estey

Billboard Chart-Topping Saxophonist VANDELL ANDREW Returns With New Single

From the vantage point of 30, his age and the name of his infectious, sensually grooving new full length album, Vandell continues to be fueled by the impressive roar of accolades and achievements th...

Metropolitan Digital - avatar Metropolitan Digital

Metropolitan Business News

An Introduction To Coworking For Australian Business Owners

Advancing technology is bringing with it great advantages in communications and networking, and to survive in business you need to keep up. With the rate at which everything changes these days, that...

News Company - avatar News Company

The Oldest Trick in The Book of Selling Cars Within 24 Hours

It takes weeks and sometimes even months to be able to find an appropriate car buyer for car owners in New Zealand. But we have a surprise for residents of Auckland who are trying to sell their car...

News Company - avatar News Company

5 reasons to store your goods

There comes a time in most people’s lives when storing their household goods and furniture in a secure storage facility is necessary. It’s easy to think that you’ll never need to use storage, but it...

Metropolitan Digital - avatar Metropolitan Digital

How much can you afford to spend on car finance?

So, you’ve made the decision to buy a new car using car finance? This is a really exciting time and you’ll be filled with questions about the best car finance for you as well as how much of your inc...

News Company - avatar News Company

Marketing Impact of Having Online Product Reviews

Whether they are searching online for a service or a specific product, in many cases customers tend to look for online product reviews. They often want to make a comparison to other products or simply...

News Company - avatar News Company

NYC-BASED PUBLIC TELECOM GIANT TCC TELEPLEX LAUNCHES

“TOMORROW’S HIGH TECH DIGITAL NETWORK TODAY” WITH ITS REVOLUTIONARY, MULT-MEDIA AND SERVICES DRIVEN IAP “EVERYTHING” KIOSK The TCC Teleplex IAP Kiosks Include a High-Res 360-Degree Webcam, a 22-...

Thomas Estey - avatar Thomas Estey

Holidays

Maya Beach Opens to Tourists

Despite recent reports that Southern Thailand's famous Maya Beach will close for three months this year, in fact no decision to this effect has been made by Thai authorities. Phi Phi Nati...

Maevadi Rosenfeldt - avatar Maevadi Rosenfeldt

SKYN LAUNCHES GUIDE TO THE BEST PLACES TO GET INTIMATE

SKYN®, Australia’s best-selling condom*, today launches its very first SKYN® Places of Intimacy Guide.   Curated in partnership with GQ Magazine and Conde Nast, the Guide features 30 lux...

SKYN - avatar SKYN

Under the Stars with Grand American Adventures

Small group adventure specialist Grand American Adventures offers a comprehensive range of thrilling tours across the Americas, but what really sets their tours apart is the unique accom...

Louise Woodruff - avatar Louise Woodruff