An American GDPR? Companies' Privacy Gurus Discuss Future Federal Data Law in DC
Privacy experts from Google, Twitter, AT&T and other companies gathered on Capitol Hill today to talk about what a federal privacy law would look like.
September 26, 2018 at 03:57 PM
5 minute read
In the wake of the European Union's General Data Protection Regulations—which went into effect in May—California passed its own data privacy law, sparking a national conversation about privacy regulation.
On Wednesday, that discussion headed to Washington, D.C. At a hearing by the Senate Committee on Commerce, Science and Transportation, representatives from communications and tech companies including Google and Twitter Inc., pushed for their vision of federal privacy regulation.
“Perhaps for the first time, there is widespread agreement among industry, policy makers and many consumer groups of the need for a new and comprehensive federal privacy law,” said AT&T Inc.'s representative, senior vice president Len Cali in his opening testimony. He and other representatives said a patchwork state-by-state regulatory framework would only harm consumers and businesses.
But some senators said the push for federal regulations could be companies' way of avoiding strict data privacy laws like the California Consumer Privacy Act, as those would be pre-empted by a potentially more relaxed national law.
“The companies which are represented here today and all across the country are ultimately going to want California law pre-empted and they're going to want other states' laws pre-empted,” Sen. Ed Markey of Massachusetts said. “They're going to ask this panel to do that. So our goal has to be to ensure that any law which we pass out of this committee is a strong law. We don't need to pass weak laws in Washington that override strong laws in California or Massachusetts or other states.”
Companies' representatives gave their input for what a federal privacy law could look like, based their experiences with GDPR and the CCPA.
Cali, alongside Apple's vice president for software technology Guy Tribble and Google's chief privacy officer Keith Enright, expressed concerns that the resources necessary to comply with regulations as strict as GDPR were so great they could push small- and medium-sized competitors out of the industry.
Enright told the committee that Google's preparations for GDPR had taken “hundreds of years of human time,” time smaller companies may not have to spare. Damien Kieran, the data protection officer at Twitter, said his company also struggled with the burden of heavy data privacy regulation.
“Organizations like Google are better positioned to absorb the compliance costs that a rigorous regulatory regime like that under the GDPR could create for small- and medium-sized businesses,” Enright said.
Enright and Amazon.com Inc. vice president and associate general counsel Andrew DeVore also expressed a desire for a clearer definition of personal information than those presented in the GDPR or the CCPA.
“CCPA's definition of 'personal information' goes beyond information that actually identifies a person to include any information that 'could be linked with a person,' which arguably is all information. The result is a law that is not only confusing and difficult to comply with, but that may actually undermine important privacy-protective practices like encouraging companies to handle data in a way that is not directly linked to a consumer's identity,” DeVore said in his testimony.
Charter Communications Inc.'s representative, senior vice president of policy and external affairs Rachel Welch, suggested “opt in” data collection and use become the standard.
Some senators also took Enright's presence as an opportunity to inquire about reports that Google is developing a censored search engine for China, the company's withdrawal from Project Maven and claims of political biases in its search engine.
Enright said the company is “not close” to launching a search engine in China. In response to questions from Sen. Ted Cruz of Texas, Enright said he is unaware of Google efforts to assess political biases in search results.
But, he said, “We're stepping outside of my core domain.”
Last month, Google irked senators on both sides of the aisle after leaving a chair empty for a Senate Intelligence Committee hearing on social media and foreign election interference. The Mountain View, California-based company had offered chief legal officer Kent Walker, who was rejected by the committee.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllAggressive FTC May Force Merging Companies to Bolster Legal Defenses
4 minute readBest Legal Departments: How Blackstone's Legal and Compliance Team Got the All-Clear to Grow Business
CEOs Want Data-Based Risk Management; GCs Lack the Tech to Do So.
InCloudCounsel Hires First GC to Continue Expansion in Asia
Trending Stories
- 1Elon Musk Names Microsoft, Calif. AG to Amended OpenAI Suit
- 2Trump’s Plan to Purge Democracy
- 3Baltimore City Govt., After Winning Opioid Jury Trial, Preparing to Demand an Additional $11B for Abatement Costs
- 4X Joins Legal Attack on California's New Deepfakes Law
- 5Monsanto Wins Latest Philadelphia Roundup Trial
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250