News Alerts and Breach Report for Week of March 27, 2023
U.S. Congresswoman Decries TikTok Ban
According to The Hill, not all U.S. legislators are ready to ban TikTok, despite recent hearings that have placed the social media company’s CEO, Shou Zi Chew in the hot seat. Rep. Alexandria Ocasio-Cortez (D-N.Y.) spoke out against potential bans by posting her first video on the platform, saying, “I think it’s important to discuss how unprecedented of a move this would be. The United States has never before banned a social media company from existence, from operating in our borders. And this is an app that has over 150 million Americans on it…They say because of this egregious amount of data harvesting, we should ban this app. However, that doesn’t really address the core of the issue.” The congresswoman noted that other social media companies also collect large amounts of personal data, and that congress should work to stop social media companies from commodifying personal data.
CFPB Launches Data Broker Inquiry
Earlier this month, the Consumer Financial Protection Bureau (CFPB) issued a request for information (RFI) focused on data brokers. The Request for Information Regarding Data Brokers and Other Business Practices Involving the Collection and Sale of Consumer Information is seeking information about data brokers’ data collection practices, consumer safety, and potential regulation. Public comments are due by June 13, 2023.
Iowa Legislature Passes Data Privacy Bill
Iowa is a signature away from passing a data privacy bill. Earlier this month, the Iowa House passed Senate Bill 262, which had already been approved by the Iowa Senate on March 6, was passed by the Iowa House on March 15, and if signed into law by Governor Kim Reynolds, will take effect January 1, 2025. The bill closely mirrors state privacy laws in California, Virginia, Colorado, and generally, the six states that have already passed comprehensive consumer data protections. Key provisions would grant consumers the right to know when and how their data is being processed, the right to opt-out of having certain kinds of personal data processed and sold, and the right to receive a copy of their data from controllers. As with other laws, consumers must have clear insight into all uses of their data. When controllers use third-party processors, a contract must include a clause that holds all people involved in processing to a duty of confidentiality, and to obey data retention laws. ADCG will publish a full report on the bill law when it is signed into law. Notably absent from Senate Bill 262 is a private right of action, a point of contention that’s stopped similar state bills from passing. The bill would also not require businesses to recognize “do not track” requests or allow consumers to correct inaccuracies in their data.
Breach Report:
* * * * * * *
To read our latest article, on Synthetic Data Generation, a new form of technology has hit the data governance market, click here.
Jody Westby hosts our podcast, ADCG on Privacy & Cybersecurity, bringing together leaders in the privacy and cybersecurity arenas to discuss a wide range of issues ranging from the proposed federal and state regulations to best practices and standards for compliance. Episodes can be enjoyed on many platforms including Spotify and Apple Podcasts. Don’t forget to subscribe!
Our most recently released episodes:
89 | Quantum Technologies: What is Possible, Where We Are Headed & Policy Issues to Consider (with guest Chris Jay Hoofnagle)
88 | TikTok: A Path for Election Interference and Open Source Intelligence? (with guests Berit Anderson, and Evan Anderson)
87 | Artificial Intelligence & Chatbots…Helpful or Harmful? (with guest Heather West)
To browse our previously published articles and news alerts, please visit our website, and don’t forget to subscribe to receive free weekly Data and Cyber Governance news and Breach Reports directly to your email.