topics: US Policy: Federal
Data Stewardship and Accountability: Operationalizing Responsible Data Broker Practices
databrokers
Laws and regulations establish what organizations must do. Accountability gives them the means to do it. This distinction—between legal obligation and operational reality—represents the critical gap in privacy protection that prescriptive rules alone cannot bridge. “Data Stewardship and Accountability: Operationalizing Responsible Data Broker Practices” is the third paper in our three-part Policy Series on Data Brokers […]
Data Brokers and Proportionate Regulation: Balancing Commercial Value, Consumer Protection, and Civil Rights
databrokers
The data broker industry defies simplistic characterization. It encompasses a spectrum of businesses, both legitimate and problematic. This complexity demands regulatory approaches that differentiate among practices and use cases. Policymakers should refrain from imposing uniform restrictions that eliminate beneficial activities and from creating categorical bans that drive harmful practices underground. Treating data brokers identically through […]
Understanding Data Brokers: Definitions, Regulations, and Enforcement in the United States
databrokers
Data is the foundation of the modern digital economy and society—fuel for innovation, business transformation, technological advancements, and services for consumers. At the heart of this dynamic marketplace are entities that gather data and make it available for beneficial uses, including the development of new products, services, and insights. Data brokers have become key players […]
CIPL Response to the US House Financial Services Committee on Current Federal Consumer Financial Data Privacy Law and Potential Legislative Proposals
regulatory engagement financial services us privacy
Ten Principles for a U.S. Privacy Law
us privacy
Earlier this year, the U.S. Congress signaled its intent to take a fresh look at the potential elements of a U.S. federal privacy law. CIPL submitted a detailed comment to the House Committee on Energy and Commerce Data Privacy Working Group on April 7th in response. Following this, we created this summary of our views […]
CIPL Response to the Office of Science and Technology Policy’s Request for Information on the Development of an Artificial Intelligence (AI) Action Plan
ai regulatory engagement us privacy
Data Minimization in the United States’ Emerging Privacy Landscape: Comparative Analysis and Exploration of Potential Effects
us privacy
We published this discussion paper as part of a series on emerging privacy laws in the United States to offer analysis and recommendations to policymakers for safeguarding consumer data privacy and enhancing responsible data practices. First, this paper analyzes the data minimization requirements in US state privacy laws and the proposed American Privacy Rights Act […]
Suggested Enhancements to “Commission-Approved Compliance Guidelines” in the American Privacy Rights Act
us privacy
On April 7, 2024, Senate Commerce Committee Chair Maria Cantwell and House Energy and Commerce Committee Chair Cathy McMorris Rodgers released a discussion draft of the American Privacy Rights Act (APRA), a comprehensive federal consumer privacy framework built on prior congressional efforts including the American Data Privacy and Protection Act (ADPPA). On May 21, 2024, […]
Ten Principles for a Revised US Privacy Framework
us privacy
Our economies and societies are in the midst of the 4th industrial revolution, with digitalization and datafication transforming the way we live, work and interact. This transformation has brought into sharp focus the question of how we should regulate data use, governance and privacy to enable us to reap the benefits of data driven innovation […]
