#adppa

Whew! Another overflowing California Privacy Protection Agency (open) board meeting today. Discussion and updates on everything from assessments and definitions to legislation, rules, enforcement, and more – so good to see #CPPA continue its progress toward protecting consumer privacy in California!

Exhibit A: check out the newly launched online 'File a Complaint' form and FAQ

https://cppa.ca.gov/webapplications/complaint

#Privacy #Cybersecurity #California #CCPA #GDPR #ADPPA #PersonalData #DoNotSell

@J12t Big tech companies have been lobbying heavily to shape service provider language -- here's a good example from the #ADPPA consumer privacy legislation, where they successfully inserted some major loopholes. I doubt they were thinking specifically of ActivityPub federation when they were doing that but it certainly applies! At least potentially, we'd need to know more about their plans to know for sure 2/2

@tchambers

@onepict @histoftech

A regular reminder that Democrats, specifically West Coast Dems, not Republicans, blocked the best chance for a federal privacy law yet, the #ADPPA, which would have started to put the kibosh on this crap.

If you use #biometric means for #commercial purposes, not just a way for your employees to #authenticate to company devices/facilities, the #FTC is putting you on notice. Only 3 states (as of today) have #Biometric #Privacy #Laws in place - more than a dozen are working on #legislation now. The #ADPPA will have provisions for Biometric Privacy with regards to commercial use, but that's probably 12-18 months out (at least) from becoming a law. Check this article out. #Illinois isn't playing around: https://www.scmagazine.com/news/identity-and-access/ftc-to-crack-down-on-biometric-tec[…]GxNNIwwXOzak6aUeaAfVN26zQDToKa3VkfI6YAs3wvdfv-Woge99JpOxqlA

#PrivacyLaws #CyberSecurity #ThreatIntelligence #WatchYourAsses

Watching this hearing on #DataBrokers in US House Commerce Committee and already several mentions of needing to pass the #ADPPA already by members. #uspol #privacy #DataPrivacy
https://www.youtube.com/live/dVx-hObuS0Y

States banning software is dumb. States passing their own unique data privacy laws is also dumb. But Democrats controlled the last Congress, had a bipartisan national privacy bill (the #ADPPA) and the Democrats killed it. #uspol #DataPrivacy

This past week, I was quoted in the Daily Dot, in a great piece by Ben Brody about civil rights protections in last year’s comprehensive federal #privacy bill (aka #ADPPA).
https://www.dailydot.com/debug/civil-rights-data-privacy-congress/

Today's Nexus of Privacy News Roundup: state privacy legislation, grocery store loyalty cards, luxury surveillance from Meta ... and a boatload more!

https://privacy.thenexus.today/privacy-news-february-22/

Here's a short thread of highlights ...

@alng looks at proposed state #privacy laws based on #ADPPA, with quotes from @onekade and @CaitrionaFitz

https://www.politico.com/news/2023/02/22/statehouses-privacy-law-cybersecurity-00083775

Obviously the USA needs a #GDPR, something like the #ADPPA maybe? In the meantime, #PermissionSlip by Consumer Reports has been working great for me and nuking data brokers that have scrounged up my data. Thanks to the #CCPA you don’t have to be a California resident to get results. But it’s all a bandaid to actual #DataRights for America. https://apps.apple.com/us/app/permission-slip-by-cr/id1591285074

New Report: Top US Data Brokers nightmarishly sell personal data of people including “highly sensitive mental health data on Americans including data on those with depression, attention disorder, insomnia, anxiety, ADHD, and bipolar disorder as well as data on ethnicity, age, gender, zip code, religion, children in the home, marital status, net worth, credit score, date of birth, and single parent status.” #DataRights #Privacy #ADPPA https://techpolicy.sanford.duke.edu/data-brokers-and-the-sale-of-americans-mental-health-data/

And it's not just Washington. There are dozens of other state privacy bills. In Congress, there's the Fourth Amendment Is Not For Sale Act, #ADPPA, #KOSA, and the upcoming #FISA reauth.

Leveraging the fediverse for legislative activism on privacy can have broad benefits.

Of course, the challenges of doing activism on Mastodon today are very real.

And this afternoon at 1:00 pm Pacific (4:00 pm Eastern), R Street Institute hosts a discussion on "the Future of Data Privacy and Security in the 118th Congress", with counsel from House Energy & Commerce, @Cam_Kerry Brandon J Pugh Alexandra Reeve Givens of @CenDemTech, moderated by Cristiano Lima. #ADPPA

https://rstreet.org/event/the-future-of-data-privacy-and-security-in-the-118th-congress

As usual, there are literally dozens more links in the full Nexus of Privacy Newsletter. Check it out at https://privacy.thenexus.today/privacy-news-january-26/

@femme_mal This is the federalist theory: that the statehouses can innovate while Washington gridlocks. Assuming this divided Congress will accomplish ZERO except scandal and controversy then there’s an argument to double-down on statehouses. The question then is what states will absorb which key elements of #ADPPA since it passed out of bipartisan committee last Congress.

@dmarti but would it really? Congress pegulating TikTok but giving a pass to other #SurveillanceCapitalism mechanism (by not passing anything or by passing something like #ADPPA that gives free rain to many surveillance capitalism business models) makes it clear that that surveillance capitailsm from US-based and US-funded companies is just fine!

@mekkaokereke a followup to your comment at https://hachyderm.io/@mekkaokereke/109620915830728313

That's a warp (for now): federal privacy legislation update, December 23

The 117th Congress has adjourned after passing the $1.7 "omnibus" appropriations bill, so it's now official: at the end of the day nothing passed

Here's a look at the progress Fourth Amendment is Not for Sale Act, #ADPPA, COPPA, #KOSA, and My Body My Data made in 2022 ... and their prospects for 2023.

https://privacy.thenexus.today/thats-a-wrap-for-now-federal-privacy-legislation-update-december-23/

#privacy #surveillance #abortion

@privacat @DLT Also locking in privacy legislation that lets companies share data with bounty hunters and law enforcement in states that have criminalized abortion and gender-affirming care (and all the other ways #ADPPA doesn't protect pregnant people or LGBTQ+ people) aligns with the GOP's priorities. Just look at the examples in this thread.

@ali That's the stated spirit of the laws and I think a lot of legislators actually believe it but the wording undercuts it. #ADPPA claims to have deletion rights but as well as the "public data" exception there are big loopholes even for Twitter DMs

https://mastodon.social/@jdp23@indieweb.social/109538470819767073 and its parent post have more.

As @mikarv has discussed Twitter DMs *are* covered by GDPR's deletion rights but I'm not sure what exceptions are in place.

@mikarv @ali

@ali I think the GDPR's "right to erasure" (aka right to be forgotten) relates to this, but I'm not an expert on that so don't know if it covers this particular case.

https://gdpr-info.eu/art-17-gdpr/

Under the proposed #ADPPA, these would be considered public data -- which is exempt, so there's no privacy right.

From this description, it seems like they'd be public under CCPA/CPRA as well.

https://www.truevault.com/learn/ccpa/what-is-publicly-available-information-under-the-ccpa

@nexusofprivacy Not really. #ADPPA's section 203 gives people the right to delete the data companies have on them, which seems like it would address the problem. But in reality there are some loopholes that would be easy for Twitter to exploit.

For example, ADPPA lets Twitter ignore deletion requests that interfere with "investigations" (§203(e)(3)(A)(vii)) – like the Twitter Files "investigation" that's currently getting press.

With only a few days left before Congress wraps up for the year, it’s hard to know what’s up with American Data Privacy and Protection Act (#ADPPA) consumer privacy bill. Things are still pretty much as discussed at the beginning of the week.

https://privacy.thenexus.today/a-coordinated-effort-not-to-mention-the-elephant/