Here's our post from yesterday with an update on where things are with #ADPPA -- and some perspectives from our experiences from legislative battles over privacy here in Washington state
@janschakowsky hopes we call all agree to "seize the moment". Carpe diem!
@FrankPallone with his opening #ADPPA statement. "Privacy rights are civil rights."
This version has numerous changes from the draft. @OmerTene has a thread with highlights, and suggests they "will lead many in industry to breath a sigh of relief."
@cathymcmorris@FrankPallone mentioned that they're still working on the preemption sections, one of the areas Senators Cantwell and Schatz have objected to. @blakereid's perspective:
@RepYvetteClarke highlights the importance of algorithmic audits. It's great to see them in ADPPA, but the language is much less specific (and IMHO weaker) than the Algorithmic Accountability Act 2022 she co-sponsored with Senators Wyden and Booker.
@RepYvetteClarke also brings up a major loophole exempting large data holders who develop systems for governmental entities. I believe this just got added in the latest draft.
@RepGusBilirakis emphasizes the progress they've made but also notes that they'll need to make further tweaks. "I know the job isn't done yet. We've heard from industry, and I'm certainly sympathetic to concerns from them."
@FrankPallone notes that the negotiators still haven't made changes to the #ADPPA draft Sections 403 (enforcement, including the private right of action) and 404 (pre-emption) ... but they will. Details TBD.
@RepFredUpton talks about privacy bills in Virginia, Colorado, Utah. @ToddFeathers and @alfredwkng looked at tech industry groups' strategy of passing weak privacy bills like these. #ADPPA
@RepLarryBucshon is concerned about potential issues for loyalty programs, something @RepFredUpton also mentioned. Brings up concerns about preemption of other health care laws -- will this cause problems for FDA?
Rep. Dunn highlights importance of continuing to discuss with industry. Concerned that bill may cause problems for research.
@RepDLesko offers an amendment to the #ADPPA amendment! She wants to inserting "political viewpoint" into the anti-discrimination language. Cites Dem Senators pressuring Google not to show fake abortion clinics, a story we discussed in privacy.thenexus.today/three-health-c…
@RepDLesko offers to withdraw the amendment if the Chair will discuss it with her, the Chair takes her up on that, so no vote.
@RepGuthrie has concerns about the bill's impact on biomedical research. Doesn't offer an amendment yet, says it needs ongoing discussion.
As @SNolanCollins says, somebody's been doing some significant lobbying.
@RepArmstrongND offers an amendment: remove the exceptions to #ADPPA's preemption of state law. He's concerned it's unlikely to withstand challenges. Needs to be "clear and manifest purpose of Congress," and the complex set of exceptions mean the scope isn't clearl.
"I know that preemption will continue to be part of the negotiations." @RepArmstrongND withdraws the amendment.
@cathymcmorris thanks @RepArmstrongND and cites his knowledge of the issue. "Creating a strong, pre-emptive national standard has been one of my priorities, and that hasn't changed. There are tough tradeoffs. Negotiations don't stop today." Again asks for stakeholder input.
@RepArmstrongND back with another amendment, this one on the private right of action. Currently, people have to notify FTC and state AG before taking an action, they have 60 days to review it, and prohibits a demand letter asking for monetary compensation before that. But ...
If I understand his objection correctly, the current language doesn't prohibit threatening language.
Also concerned that state AGs can proceed independently of FTC. He wants an "enforcement hierarchy." Actually, he opposes a PRA together, but this is an attempt to improve it.
And now @RepArmstrongND offers another #ADPPA amendment -- expanding the right to cure, which is currently (somewhat) limited. Notes that California's CCPA included a right to cure. Doesn't mention that California's new CRPA *removed* the right to cure!
The ayes have it! The replacement amendment is agreed to.
And now they vote on advancing the amended #ADPPA to the full committee ...
The ayes have it! And we're done!
Here's @publicknowledge's statement on the markup, highlighting that the bill still needs strengthening. They also that the bill weakens the FCC's authority -- a topic that several witnesses brought up in the hearing but wasn't addressed in the markup.
@omertene highlights a significant change in this revision of the ADPPA: a person's race, ethnicity, national origin and religion are no longer considered "sensitive data".
@geoffreyfowler looks at software that thousands of clinics and hospitals across the United States use to check people into appointments ... which harvests the information people provide and uses it to target ads.
How can they do that? There's a paragraph authorizing this in the consent form people sign when they're checking in. Most people don't bother to read it, so consent to sharing without even thinking about it.
It's a great example of the limitations of "notice and consent".
Time for some hot #privacy action! The House Subcommittee on Consumer Protection and Commerce hearing on the American Data Privacy and Protection Act (#ADPPA) starts at 10:30 am Eastern!