The SECURE Data Act: A Snowball’s Chance of Passing?
Congress is taking another swing at a federal privacy framework with the introduction of the SECURE Data Act, a bill that aims to create a single national privacy standard, preempting existing state laws. The question on everyone’s mind is: does this bill have a snowball’s chance of passing?
What’s in the SECURE Data Act?
The SECURE Data Act, which stands for Securing and Establishing Consumer Uniform Rights and Enforcement over** D**ata, would apply to companies that do business in the US and meet certain data and revenue thresholds. These thresholds are fairly high: a company would either have to collect personal data on more than 200,000 consumers a year and earn at least $25 million in annual revenue, or handle the data of at least 100,000 consumers and derive 25% or more of its revenue from data sales.
The bill doesn’t reinvent the wheel, instead baking in familiar privacy concepts:
* Data minimization: only collect what you need
* Purpose limitation: don’t use data for unrelated purposes
* Security: keep it secure
* Consumer rights: access, correct, and delete data, as well as opt-out of targeting advertising
The Federal Trade Commission (FTC) would be the primary enforcer, with state attorneys general providing backup. Notably, there is no private right of action, which means individuals wouldn’t be able to sue – a reason business groups are already looking at this bill more favorably.
How Does it Compare to State-Level Privacy Laws?
The SECURE Data Act’s thresholds are significantly higher compared to many state laws. For example:
* Connecticut, Delaware, and Maryland have thresholds as low as 35,000 consumers
* In contrast, the SECURE Data Act requires 200,000 consumers or more
This disparity may have implications for companies operating in multiple states. Those that meet the SECURE Data Act’s thresholds may be exempt from more stringent state regulations, while smaller companies may still be subject to stricter state laws.
Chances of Passing: An Uphill Battle?
The SECURE Data Act faces an uphill battle, particularly when it comes to preemption. States like California are hesitant to let Washington dictate their own privacy laws. In fact, preemption has been a major hurdle for past federal privacy bills.
However, the lack of private right of action may make the bill more palatable to business groups. According to Kalshi, a platform that allows users to bet on the outcome of events, the odds of the SECURE Data Act passing are around 20%. While this is a relatively low probability, it’s not impossible.
A Unique Angle: A Two-Tiered System?
The SECURE Data Act’s high thresholds may be a strategic move to gain support from larger companies. However, this could also create a two-tiered system where smaller companies are exempt from federal regulations, while larger companies are held to a higher standard. This raises questions about the bill’s fairness and effectiveness in protecting consumer data.
Original Insights
- FTC Resources: The bill’s reliance on the FTC as primary enforcer may lead to increased scrutiny of the agency’s resources and capabilities to effectively regulate data privacy. Will the FTC have the necessary bandwidth and expertise to take on this role?
- Regulatory-Focused Approach: The lack of private right of action may indicate a shift towards a more regulatory-focused approach to data privacy, rather than a litigious one. This could have significant implications for how data privacy is enforced in the US.
Conclusion
The SECURE Data Act is the latest attempt at a federal privacy framework, but its chances of passing are uncertain. While the bill has some familiar and reasonable provisions, preemption and the two-tiered system may be significant hurdles. As the bill makes its way through Congress, one thing is clear: the data privacy landscape is about to get a lot more interesting. Will the SECURE Data Act gain traction, or will it fade away like previous attempts? Only time will tell.
💡 Deep Dive: Don’t miss our Ultimate Industry Guide for advanced strategies.
