Page 88 - CDM-CYBER-DEFENSE-eMAGAZINE-December-2018

Leading The Way in Discussions for National Privacy Laws

Business and consumers continue to discuss privacy regulations and legislation. Data breaches, data
vulnerabilities, and compromised private information is released in the news almost daily. Legislation
has recently been proposed for individual states regarding data privacy regulations head-on. Virginia,
Vermont, Colorado, and New Jersey have all introduced related privacy regulations most recently.
California recently set themselves apart in the privacy space with the adoption of the California Consumer
Privacy Act (CCPA), which gave citizens the rights to not only protect their own data, but to obligate
businesses to disclose exactly which information has been collected about them.

At the federal level, the United States has yet to propose a national privacy bill. Vermont recently
implemented a law regulating data broker companies that buy and sell personal information. With the
new law, brokers must disclose what information they collect as well as allow customers to opt out of
collection. Furthermore, consumers can sue data brokers if they sell any information that causes illegal
discrimination. A similar law has also been proposed in Colorado that is broader, yet specifically manages
personal identifying information. Individual states seem to be leading the way for data privacy regulation
discussions.

International regulations have also played a significant role in the privacy discussion, specifically following
enforcement of the GDPR (General Data Privacy Regulation) in the European Union (EU).

These regulations have certainly contributed to the movement towards consumerism and prompted
businesses in the United States to rethink data collection and management, considering how violating
these regulations could adversely affect their business and brand. Many organizations are asking

88