1 big thing: Calif. privacy law sets stage for debate
The privacy bill signed into law in California on Thursday won’t settle the global fight over privacy, but it does usher in a new phase that could lead to a new national model for regulating data online, Axios' David McCabe reports.
What's happening: The bill was drafted and passed quickly, with even the bill's authors saying there may be additional changes and clarifications before it goes into effect. “If possible, we could find some fixes this year,” said Ed Chau, member of the California Assembly. “That’s my hope, but no promises.”
- The law passed Thursday goes into effect in 2020. If nothing changes before then, the law will put restrictions on Google, Facebook and other companies in the business of gathering data directly from consumers.
- Facebook vice president Will Castleberry said that while "not perfect, we support" the law, though some trade groups that represent the company were more critical in statements after it passed.
- Supporters agreed to pull their privacy ballot measure, which was slightly more aggressive, from the November election, so voters won't weigh in on the debate.
As it stands now, the law lets users:
- Learn details about the data that companies hold on them.
- Opt-out of collected data being sold to a third party (Google and Facebook both say they don't do this, because you cannot directly buy an individual's data from them).
- In some cases, sue if their data isn’t properly protected.
- Use new protections aimed at children.
What’s not settled:
1. Whether this bill sets a standard, as some privacy advocates hope since California's size can make it a trendsetter when it comes to policy.
- “Well, between the Europeans and California, we’re starting to move towards having a universal privacy bill of rights, and I just think it’s going to create a precedent that ultimately is going to be a national standard,” said Sen. Ed Markey (D-Mass.) as he left the U.S. Capitol on Thursday.
2. Whether Silicon Valley can change it before 2020. Multiple tech industry sources said that companies will push for alterations to the bill.
3. Whether this spurs any action in Washington. The Trump administration is exploring ways to create a less restrictive counterweight to Europe’s GDPR privacy rules, in consultation with business groups. California is on the White House’s mind.
- Gail Slater, the White House adviser working on privacy, called the ballot measure in California that inspired the new law, “GDPR light with some California tweaks to do it” when speaking at a conference last month.
The big picture: Policymakers around the globe — in Washington, Brussels and now Sacramento — are all articulating different visions of how consumer data should be handled online. There may only be one internet, but there are many jurisdictions, and tech's colossal companies must deal with all of them.