Mar 242022

Uniform Personal Data Protection Act Offers an Alternative Approach to Consumer Data Protection

Vishnu Tirumala, Alan Charles Raul and Michele L. Aronson
, ,

*This article first appeared in Legaltech News on March 22, 2022, available here.

With federal consumer privacy bills gaining little traction, the Uniform Law Commission proposes the Uniform Personal Data Protection Act (UPDPA) as an alternative to the existing quilt of state consumer privacy laws. In a panel hosted by Sidley Austin partner Alan Raul, the drafters discussed the major features of the law and how they balance consumer concerns about data privacy while reducing commercial disruption. This article summarizes the panel discussion and compares the proposal with existing state consumer privacy laws. Legislation modeled on the UPDPA has already been introduced in three U.S. jurisdictions, with potentially more on the way as states consider possible solutions to inertia in Congress and divergence in state capitols.

This post is as of the posting date stated above. Sidley Austin LLP assumes no duty to update this post or post about any subsequent developments having a bearing on this post.

Vishnu Tirumala

Washington, D.C.

vtirumala@sidley.com

Alan Charles Raul

Washington, D.C., New York

araul@sidley.com

Michele L. Aronson

Washington, D.C.

maronson@sidley.com

You might also like
Advisor to the CJEU Confirms GDPR Fines For Subsidiary Infringements Should Reflect Group Turnover

On 12 September 2024, Advocate General Medina issued their Opinion in Case C-383/23 (Opinion) in which they confirmed that supervisory data protection authorities (SAs) must, when calculating the fine for a GDPR infringement committed by a subsidiary, take into account the total annual turnover of the entire group—a concept known as parental liability.

DOL Confirms Cybersecurity Guidance Applies to All Employee Benefit Plans

The U.S. Department of Labor (DOL) published Compliance Assistance Release No. 2024-01 on September 6, 2024. The release, titled “Cybersecurity Guidance Update,” clarifies that the cybersecurity guidance the DOL issued in April 2021 applies to all employee benefit plans, including health and welfare plans. The DOL states that since the guidance was published, service providers have told plan fiduciaries and Employee Benefits Security Administration (EBSA) investigators that the guidance applies only to retirement plans.

The Legal Battles Taking Shape in the Clash Over Internet Content

A federal law known as Section 230 has provided a powerful legal shield for internet companies for nearly three decades. Designed to “promote the internet,” it protects platforms from civil liability for content posted to their sites by third parties.