What’s the status of federal privacy law reform efforts?
By Jennifer K. Wagner
While the American Data Privacy and Protection Act, which gave us excitement in June 2022 (as we discussed on this blog) did not make it across the finish line, this year much excitement has been generated by the American Privacy Rights Act (APRA).
The APRA is a bicameral and bipartisan effort to modernize the federal privacy law protections for Americans. Introduced on April 7, 2024 by Representative Cathy McMorris Rodgers (R-WA) and Senator Maria Cantwell (D-WA), who are the Chairs of the House Committee on Energy and Commerce and Senate Committee on Commerce, Science and Transportation, respectively, this discussion draft offers comprehensive data privacy protections. A legislative hearing was held on April 17, 2024 in the House, with recognized consensus that “[t]his is Congress’s best chance to establish comprehensive data privacy protections.” Full Committee markup of the bill was announced on June 25, 2024, but that action was delayed after some dramatic opposition was voiced.
Opposition came from 55 civil society organizations—led by The Lawyers’ Committee for Civil Rights Under Law, The Leadership Conference on Civil and Human Rights, and the American Civil Liberties Union—in a letter emphasizing, “Privacy rights and civil rights are no longer separate concepts — they are inextricably bound together and must be protected.” The groups called for restoration of civil rights protections and algorithmic auditing provisions that had been previously considered and for a delay to enable “greater stakeholder consultation.” Earlier opposition had come from a group of states led by California Attorney General Rob Bonta (joined by offices of the attorney general in Pennsylvania as well as Connecticut, Delaware, District of Columbia, Illinois, Maine, Maryland, Massachusetts, Minnesota, Nevada, New York, Oregon, and Vermont along with the office of consumer protection from Hawaii), who sent a letter criticizing the bill for its provision that would preempt state law and noting concern that the bill could “undermine protections that states have already established.”
While it is reasonable to think that little will get done during a Presidential election year, privacy law reform is unquestionably an issue of the utmost priority for Congress. Moreover, time is of the essence, particularly as artificial intelligence (AI) rapidly advances. That sentiment came from Senator Cantwell in September during remarks she gave as keynote speaker for Forum Global’s 6th Annual Data Privacy Conference. Senator Cantwell underscored, “AI brings us to an inflection point, whether we can establish the ground rules or really leave consumers defenseless.”
As we watch to see when and how APRA develops in the weeks ahead (including how markups might change current drafts), two useful resources for understanding the bill’s provisions include the Legal Sidebar (LSB11161) on the APRA published in May by the Congressional Research Service and the “American Privacy Rights Act Cheat Sheet” published by the International Association of Privacy Professionals (IAPP) in May and most recently updated in June.
***
Jennifer K. Wagner, J.D., Ph.D., is a solo practicing attorney and also is Assistant Professor of Law, Policy, and Engineering and Anthropology at Penn State University. She has been a member of the PBA Cybersecurity & Data Privacy Committee since 2018, is a former contributing editor of the Genomics Law Report, and has published scholarly articles in prominent legal and scientific journals, including the Journal of Law & Biosciences; Journal of Law, Medicine, & Ethics; Albany Law Journal of Science & Technology; Virginia Sports and Entertainment Law Journal; North Carolina Journal of Law and Technology; Science; Nature Communications; Nature Medicine; American Journal of Human Genetics; Human Genetics and Genomics Advances; Genetics in Medicine; and PLOS Genetics. She served as a AAAS Congressional Fellow in a U.S. Senator’s office in 2014-2015, and her work has been cited by the Supreme Court of the United States. You may follow her on several social media platforms as @DNAlawyer. Views expressed are her own.