State Privacy Action
In the absence of Congressional action, many states continue to look at passing their own privacy laws, some comprehensive and some more narrowly targeted, such as health, location data, or pricing programs. The AAF does not support the enactment of any of these laws, believing a single national standard would better serve both consumers and businesses. However, in recognition that many states will pass their own laws, in addition to expressing our opposition, we offer suggestions to lawmakers as to how they can make the measures more closely align with existing laws in other states.
3 3 26 Minnesota HF 2700 To Modify the Minnesota Consumer Data Privacy Act
Our concern with the current proposal relates to how the term “health data” is defined. Because the term includes any data that “identifies” a health status, it may unintentionally encompass non-sensitive data, and therefore impact general advertising practices that do not involve identifying or targeting individuals based on actual health conditions. Read the full letter.
3 9 26 Tennessee SB 1998 Prohibits Algorithmic Pricing
SB 1998 would significantly limit Tennessee consumers’ access to discounts and special pricing. Read the full letter.
3 9 26 Maryland SB 889 Prohibiting Surveillance-Based Pricing
SB 889 would fail to adequately protect the everyday value that common pricing practices, such as discounts and personalized offers, provide to Maryland consumers, nor does it recognize that personalized pricing strategies can enhance consumer choice and satisfaction. Read the full letter.
3 9 26 Maryland SB 827 Regulates Designs and Uses of Chatbots
SB 827 would prohibit an operator from processing a user’s “chat log” to determine whether to display an advertisement for a good or service or to customize an advertisement shown to that user. This approach is both overbroad and in tension with Maryland’s existing privacy framework under the Maryland Online Data Privacy Act (“MODPA”), which already gives consumers the right to opt out of targeted advertising, rather than eliminating it outright. Read the full letter.
Hawai’i SB 1163 Prohibits the Sale of Geolocation and Internet Browser Information Without Consent
As drafted, SB 1163 would adopt a privacy framework that is out of step with approaches taken by other states, undermine the ad-supported Internet, and disrupt the online marketplace. Read the full letter.
3 26 26 New Hampshire HB 1460 Prohibiting the Sale of Location and Other Sensitive Data Regarding Children
We ask that HB 1460 be harmonized with existing law in New Hampshire. The Senate should focus its efforts on harmonizing the bill with the New Hampshire Data Privacy Act which consistently uses “known child” as the standard, aligned to trigger heightened obligations for children’s data. Read the full letter.
4 6 26 California Privacy Protection Agency Invitation for Preliminary Comments, Reducing Friction in the Exercise of Privacy Rights
We strongly believe that any future regulations should avoid prescribing user-interface design or notice language in a manner that effectively dictates how businesses communicate with consumers or structure their products. Such mandates may raise constitutional concerns and extend beyond the Agency’s authority to regulate. Read the full letter.
4 6 26 Vermont H. 211 Relating to Data Brokers and Personal Information
H. 211 should be updated to clarify that it does not create a private right of action under any law. Instead, enforcement should be vested with the Attorney General (“AG”) alone, because such an enforcement structure would lead to stronger outcomes for Vermont residents while better enabling businesses to allocate resources to developing processes, procedures, and plans to facilitate compliance with the bill’s new requirements. Read the full letter.
4 12 26 Alaska HB 367 Relating to the Privacy of Consumer Personal Information
As currently drafted, HB 357 is significantly out of step with other state omnibus privacy laws. We ask the House Judiciary Committee to harmonize the bill with the consensus approach to data privacy adopted across several states, such as Nebraska and Oklahoma. Read the full letter.
5 7 26 California Privacy Protection Agency, Invitation for Preliminary Comments, Delete Request and Opt-Out Platform Audits
We have concerns about certain topics identified for possible new rulemaking and the direction under consideration by the Agency. Below we provide comments on a non-exhaustive list of issues we have identified with the Agency’s preliminary rulemaking efforts. Read the full letter. |