Bill Tolson President

One possible compromise could involve the preemption clause in ADPPA. Although a consistent national standard is attractive for businesses that operate across state lines, there might be an opportunity for a mixed approach that allows certain aspects of state laws to exist alongside the federal framework. This could mean allowing stronger state laws to continue in specific areas, such as biometric data privacy or data breach notification requirements.

This write-up is a companion piece to my previous blog, “The Evolving Data Privacy Landscape: Trends in Data Privacy Laws.” This post will tie the emerging data privacy law requirements discussed in the last blog into the new data privacy laws that will affect how organizations change their information management. Data privacy laws are becoming increasingly prevalent and disruptive for businesses across many industries.

In today's data-hungry world where personally identifiable information (PII) is constantly collected, processed, shared, and sold — data privacy has become a paramount concern to individuals, companies and governments. Individuals are becoming increasingly aware of the need to protect their PII. Companies are becoming aware of the risks of holding and properly securing PII, and lawmakers are responding to voters by enacting sweeping data privacy laws.