GDPR Regulators, FTC Chairman Talk Privacy Law and Enforcement at IAPP Summit Panels
GDPR regulators from Ireland, the U.K. and Austria shared the lessons they'd pass on to American lawmakers at an IAPP Global Privacy Summit Panel Thursday. The day also included a session with FTC Chairman Joseph Simons on a possible federal privacy law and his agency's enforcement strategies.
May 02, 2019 at 05:22 PM
4 minute read
Regulators from both sides of the Atlantic weighed in on privacy regulations and enforcement on the first day of the International Association of Privacy Professionals' annual summit in Washington, D.C.
The Global Privacy Summit kicked of Thursday morning with a panel of European regulators: U.K. Information Commissioner Elizabeth Denham, Irish Data Protection Commissioner Helen Dixon and head of the Austrian Data Protection Authority and chairwoman of the European Data Protection Board Andrea Jelinek, moderated by Bird & Bird partner Ruth Boardman.
Almost a year after the EU's General Data Protection Regulation went into effect, the regulators discussed what's worked.
Jelinek said the importance of having a data protection officer role "can't be overstated." Appointing a DPO was mandatory for some companies under GDPR. She also said GDPR's status as an EU-wide law "makes it easier" for companies to comply because there's just "one set of rules." Her comments come as American policymakers debate whether a U.S. federal privacy law would preempt state laws, including the California Consumer Privacy Act.
The Senate Committee on Commerce, Science and Transportation heard Dixon's input on an American federal privacy law at a hearing Wednesday, where she noted that each member state has its own "flavor" of GDPR despite it being EU-wide. On the panel, Dixon said she's interested in U.S. policymakers' focus on whether an American privacy law "would regulate very specific uses as well was having those high-level principles and rules."
In an afternoon session, Federal Trade Commission chairman Joseph Simons spoke with IAPP president and chief knowledge officer Omer Tene about the future of a federal data privacy law and the agency's enforcement strategies.
Simons said he's heard a federal law could be coming. He was hesitant to speculate on whether it would include preemption or what that would look like, but Simons guessed it would be a "narrow preemption focused on laws that look like CCPA." If a federal law does come, Simons said the FTC would need to "beef up" its Division of Privacy and Identity Protection to meet enforcement needs.
According to the Simons, the FTC currently has 40 employees who "punch way above their weight," but the agency would use any extra resources allocated by Congress "to very good use." Consumer advocates called for more FTC resources at Wednesday's Senate committee hearing, comparing the size of the FTC with Ireland's Data Protection Commission size of around 140 employees.
Simons said the comparison is "apples to oranges" because the IDPC has more authority and oversees GDPR. He also noted the different power between European regulators and the FTC.
"One thing we do not have which the EU has is fining authority. … The only way we can get money from folks in these privacy cases is we have to get them under order and we have to have them seek civil penalties and we can't do that ourselves, we have to go to court," Simons said.
He declined to answer a question on a possible coming FTC penalty on Facebook, which the Menlo Park, California-based company has estimated could be up to $5 billion. Simons did say the idea of charging company executives for illegal data privacy business practices is "on the [FTC's] radar," but he's not "expecting to do this in every case."
Read More:
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllAggressive FTC May Force Merging Companies to Bolster Legal Defenses
4 minute readBest Legal Departments: How Blackstone's Legal and Compliance Team Got the All-Clear to Grow Business
CEOs Want Data-Based Risk Management; GCs Lack the Tech to Do So.
InCloudCounsel Hires First GC to Continue Expansion in Asia
Trending Stories
- 1Infant Formula Judge Sanctions Kirkland's Jim Hurst: 'Overtly Crossed the Lines'
- 2Election 2024: Nationwide Judicial Races and Ballot Measures to Watch
- 3Guarantees Are Back, Whether Law Firms Want to Talk About Them or Not
- 4How I Made Practice Group Chair: 'If You Love What You Do and Put the Time and Effort Into It, You Will Excel,' Says Lisa Saul of Forde & O'Meara
- 5Abbott, Mead Johnson Win Defense Verdict Over Preemie Infant Formula
- 6How Much Does the Frequency of Retirement Withdrawals Matter?
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250