Laws and regulations establish what organizations must do. Accountability gives them the means to do it. This distinction—between legal obligation and operational reality—represents the critical gap in privacy protection that prescriptive rules alone cannot bridge.
“Data Stewardship and Accountability: Operationalizing Responsible Data Broker Practices” is the third discussion paper in our three-part Policy Series on Data Brokers in the U.S. This paper addresses how data brokers can operationalize regulatory obligations through data stewardship, accountability structures, and governance practices.
The first two papers in our series are available here and here.