Adam Schiff on Federal Privacy Law and Data Broker Regulation

The Need for Federal Privacy Legislation

• 💡 California has led the way with comprehensive consumer privacy laws like the CCPA, proving that innovation and consumer protection can coexist.
• ⚠️ New technologies like AI, facial recognition, and algorithmic targeting pose increasingly sophisticated threats to Americans' privacy.
• 📌 A federal privacy law is needed to establish robust baseline protections while allowing states to enact stronger measures and adapt to rapidly evolving technologies.

Data Broker Misuse and Regulation

• 🎯 Data brokers have been implicated in political assassinations by providing shooter's addresses and have sold sensitive flight data to government agencies.
• 🚀 California's upcoming Delete Act will allow 40 million residents to request data deletion from over 500 data brokers via a single webpage.
• ⚖️ Federal legislation should regulate data brokers, including mandatory registration and a central clearinghouse, to prevent personal information from being sold to outside entities.

State vs. Federal Privacy Protections

• 🔑 Experts emphasize the need for a federal privacy law that sets a floor, not a ceiling, allowing states to maintain and strengthen their own protections.
• 🏦 Historical parallels are drawn to the financial crisis, where federal regulators hindered state efforts to curb predatory practices, suggesting caution against preempting state privacy laws.
• 🚫 Concerns are raised about federal agencies bypassing established privacy laws to demand sensitive state-level data, potentially violating laws like the Privacy Act of 1974 and HIPAA.

Precedents and Enforcement

• 🔍 Federal privacy laws like ECPA, RFPA, and FCRA establish floors, not ceilings, permitting states to enact more protective measures.
• ⚠️ There's a call for stronger enforcement actions against data brokers, citing past FTC actions that banned the sharing of sensitive geolocation data.
• 🇺🇸 The US may be falling behind international standards for data protection if federal agencies do not adhere to existing privacy laws.