As the digital economy expands, more attention is being paid to the impact of data processing on consumers and how to maintain responsible and trustworthy treatment of personal information. Companies have responded to shifting consumer views and expectations about how data is collected and used online by developing new data transparency tools and controls. Policymakers are also seeking ways to ensure that data controllers exercise fair information practices to protect and empower users while also encouraging innovation and protecting economically vital flows of data, particularly across borders.

CCIA’s View

New technologies and data practices have stressed the traditional U.S. sectoral approach to protecting consumer privacy. In response, Congress should adopt a federal baseline consumer privacy law to ensure that consumers’ personal information is handled responsibly no matter where it is collected or who is processing it. This framework should set consistent transparency requirements, consumer controls, and accountability measures for data controllers, while empowering the Federal Trade Commission to carry out robust enforcement. Such a framework should be risk-focused, technology-neutral, and provide safe harbors and flexibility for organizations to make adjustments according to the needs of individuals and evolving technology.

Developing comprehensive and durable privacy rules requires balance. The desire to bring the power of government to bear on the issue is a strong one, but it must be set against the need to encourage innovation, unlock the incredible social value of big data, and not to infringe upon related values such as the freedom of speech. Overly prescriptive or onerous regulation risks creating high barriers to entry for new companies and may even prohibit the creation of beneficial new technologies and privacy protective techniques and services.

Most Recent Statements:

Location Privacy Ups and Downs

Last week a federal appeals court ruled on a subject dodged by the Supreme Court last year in US v. Jones: Whether the government can use your phone as a tracking device without getting a warrant first. Unfortunately the Sixth Circuit decided in a 2-1 opinion that you have no reasonable expectation of privacy in…

-

Facial Recognition and the Panopticon

Last week the Senate Judiciary Committee’s Subcommittee on Privacy, Technology, and the Law held the first of what will probably be many hearings on the privacy implications of facial recognition software. Much of the conversation somewhat predictably focused on how companies are making use of this new technology, and we agree that care should be…

-