#adppa — Public Fediverse posts

Civil Society and the Crisis of Privacy Law: a very interesting paper by Ari Ezra Waldman about ADPPA -- a proposed US privacy law that didn't go forward back in 2022. As somebody who was part of the discussions, it seems extremely accurate to me -- and makes some great points about the inherent limitations of today's approach, as well as directions going forward.

Here's the abstract:

" Based on interviews with key players, public reports, and previously undisclosed primary sources, this Article tells the inside story of the American Data Privacy and Protection Act (ADPPA) and the role of privacy nonprofit organizations in crafting it. It uses ADPPA’s drafting as a case study about larger questions of expertise, the lawmaking process, and the role of law in setting the context of advocacy. The Article’s descriptive argument is that background law and the dynamics of privacy policymaking in the United States Congress channeled and constrained the choices made by privacy civil society organizations while negotiating and drafting key parts of ADPPA. Those choices focused on the nature of civil society’s expertise within the legislative process and the kinds of policy proposals nonprofit advocates brought to the table. The Article’s normative argument is that those choices created a privacy law that is ill-suited to addressing the privacy challenges of artificial intelligence (AI). Following Thomas Kuhn’s model of normalization, anomaly, and paradigm shift, the ADPPA case study surfaces how the law places limits on civil society and the need for new approaches to privacy law and civil society expertise in the age of AI."

And here's a key point about who does -- and doesn't -- get to write the legislation.

#privacy #ADPPA #uspol

Между буквой и духом законов: как международной компании защитить ПДн клиентов и избежать санкций

Большинство международных компаний ходит по тонкому льду — когда твои сотрудники и пользователи разбросаны по всему миру, хранение и обработка их персональных данных становится сложной юридической проблемой. Если пытаться досконально вникнуть в законы сразу всех стран, можно превратиться в юридическую контору. С другой стороны, повсюду есть надзорные органы, которые грозят санкциями за любые нарушения. Чтобы избежать претензий, не навредить пользователям и обеспечить стабильное развитие бизнеса, недостаточно изучать нормативную базу. Желательно также знакомиться с реальным опытом разных компаний, особенно из числа тех, для кого работа с ПДн имеет первостепенное значение. Мы побеседовали с экспертами из соцсети ReLife, пользователи которой проживают в более 70 странах мира. Они рассказали, на что в первую очередь обращают внимание, на какие законы ориентируются, с какими рисками и «подводными камнями» сталкиваются и как их обходят. Вместе мы сравнили американское, европейское и российское законодательство по охране ПДн и делимся практическими рекомендациями по его соблюдению.

https://habr.com/ru/companies/bastion/articles/788114/

#пдн #законодательство #законодательство_в_it #gdpr #ADPPA #152фз #правовое_регулирование #персональные_данные

@onepict @histoftech

A regular reminder that Democrats, specifically West Coast Dems, not Republicans, blocked the best chance for a federal privacy law yet, the #ADPPA, which would have started to put the kibosh on this crap.

If you use #biometric means for #commercial purposes, not just a way for your employees to #authenticate to company devices/facilities, the #FTC is putting you on notice. Only 3 states (as of today) have #Biometric #Privacy #Laws in place - more than a dozen are working on #legislation now. The #ADPPA will have provisions for Biometric Privacy with regards to commercial use, but that's probably 12-18 months out (at least) from becoming a law. Check this article out. #Illinois isn't playing around: https://www.scmagazine.com/news/identity-and-access/ftc-to-crack-down-on-biometric-tec[…]GxNNIwwXOzak6aUeaAfVN26zQDToKa3VkfI6YAs3wvdfv-Woge99JpOxqlA

#PrivacyLaws #CyberSecurity #ThreatIntelligence #WatchYourAsses #BreachNotificationRule

If you use #biometric means for #commercial purposes, not just a way for your employees to #authenticate to company devices/facilities, the #FTC is putting you on notice. Only 3 states (as of today) have #Biometric #Privacy #Laws in place - more than a dozen are working on #legislation now. The #ADPPA will have provisions for Biometric Privacy with regards to commercial use, but that's probably 12-18 months out (at least) from becoming a law. Check this article out. #Illinois isn't playing around: https://www.scmagazine.com/news/identity-and-access/ftc-to-crack-down-on-biometric-tec[…]GxNNIwwXOzak6aUeaAfVN26zQDToKa3VkfI6YAs3wvdfv-Woge99JpOxqlA

#PrivacyLaws #CyberSecurity #ThreatIntelligence #WatchYourAsses #BreachNotificationRule

Watching this hearing on #DataBrokers in US House Commerce Committee and already several mentions of needing to pass the #ADPPA already by members. #uspol #privacy #DataPrivacy
https://www.youtube.com/live/dVx-hObuS0Y

States banning software is dumb. States passing their own unique data privacy laws is also dumb. But Democrats controlled the last Congress, had a bipartisan national privacy bill (the #ADPPA) and the Democrats killed it. #uspol #DataPrivacy

I really wish reporters would call people out for quotes like this. It's just not true. #ADPPA is stronger than #CCPA in most respects, and where CCPA is stronger, it's marginal. CA gets way more authority under ADPPA.

Anyway, the article is here https://news.bloomberglaw.com/in-house-counsel/us-online-privacy-law-remains-elusive-as-tiktok-outrage-mounts

And the ADPPA / CCPA comparison chart is here https://techpolicy.press/evaluating-the-american-data-privacy-and-protection-act/

#Privacy

On Feb. 28 Governor Newsom, AG Bonta, and the #ccpa sent a join letter to Congress opposing the preemption language in HR 8152 #ADPPA

There is no doubt that strong federal #privacy legislation is needed, but it should not result in weaker protections for #California.

https://www.gov.ca.gov/2023/02/28/governor-newsom-attorney-general-bonta-and-cppa-file-letter-opposing-federal-privacy-preemption/

the only jobs Republicans don't care about are plaintiffs lawyers, apparently.

#Privacy #PrivateRightOfAction #ADPPA

The European Parliament's Committee on Civil Liberties, Justice and Home Affairs ("LIBE") released a draft resolution that does not look very kindly on the US attempt to support an adequacy determination under GDPR through an Executive Order. (It points out all the things it finds lacking in the US attempt at creating a new data privacy framework - no surprises here.) If this is indicative of the final outcome at the Commission (please, no wagering ;) ), Mr Schrems will be happy... and many of us will continue to work under the assumption that this is all going nowhere fast. Among the many failings noted: The US does not have a federal privacy law. #ADPPA was on the table in the last Congress. Are nudges from #POTUS at the #SOTU and from the #EU going to be sufficient to get the ball rolling again? Would any such law comprehensively address the outstanding concerns re: adequacy? Does failure to adopt such a law harm the global economic position of the US in the near term or in the long term? What other issues are raised by this development or by an eventual negative finding re: adequacy? #GDPR #adequacy #LIBE #DPF #dataprivacyframework #dataprivacy #privacy #data #personaldata #personaldataprotection #dataprotection #schremsii #schremsiii #EU #IAPP https://www.europarl.europa.eu/doceo/document/LIBE-RD-740749_EN.pdf

Obviously the USA needs a #GDPR, something like the #ADPPA maybe? In the meantime, #PermissionSlip by Consumer Reports has been working great for me and nuking data brokers that have scrounged up my data. Thanks to the #CCPA you don’t have to be a California resident to get results. But it’s all a bandaid to actual #DataRights for America. https://apps.apple.com/us/app/permission-slip-by-cr/id1591285074

⚠️New Report: Top US Data Brokers nightmarishly sell personal data of people including “highly sensitive mental health data on Americans including data on those with depression, attention disorder, insomnia, anxiety, ADHD, and bipolar disorder as well as data on ethnicity, age, gender, zip code, religion, children in the home, marital status, net worth, credit score, date of birth, and single parent status.” #DataRights #Privacy #ADPPA https://techpolicy.sanford.duke.edu/data-brokers-and-the-sale-of-americans-mental-health-data/

@femme_mal This is the federalist theory: that the statehouses can innovate while Washington gridlocks. Assuming this divided Congress will accomplish ZERO except scandal and controversy then there’s an argument to double-down on statehouses. The question then is what states will absorb which key elements of #ADPPA since it passed out of bipartisan committee last Congress.

Sorry to link to the #birdsite but I did a long thread there about how #KOSA (the deeply misguided #KidsOnlineSafetyAct) is a major threat to online access to #abortion information, fundraising and organizing.

Congressional leaders are deciding like RIGHT NOW what bills go into the #omnibus package. Anyone who can please reach out to oppose #KOSA and support actually good bills like #OAMA, #AICOA, and #ADPPA.

https://twitter.com/evan_greer/status/1603791142184620043

Big Tech companies ARE doing real harm to kids. But #KOSA won't make things better. Congress needs to pass real laws like #AICOA, #OAMA, and #ADPPA (which needs to be improved but is a good start) to chip away at Big Tech abuses. And we need robust #FTC enforcement too.

Dems holding the Senate means Chuck Schumer is fresh out of excuses and needs to deliver ASAP on tech policy promises like

* Confirm Gigi Sohn to the #FCC so they can restore #NetNeutrality and #privacy rules

* Pass #AICOA and #OAMA antitrust bills to crack down on #BigTech self dealing

* Bigger lift but they should improve / strengthen #ADPPA and pass that too. End #SurveillanceCapifalism as a biz model

More analysis from @team here https://fightforthefuture.org/2023