2 ms·

Official press release: https://www.wyden.senate.gov/news/press-releases/wyden-releases-discussion-draft-of-legislation-to-provide-real-protections-for-american

Official press release: https://www.wyden.senate.gov/news/press-releases/wyden-releases-discussion-draft-of-legislation-to-provide-real-protections-for-americans-privacy https://www.wyden.senate.gov/news/press-releases/wyden-relea... Links below are from the above Text of the draft: https://www.wyden.senate.gov/imo/media/doc/Wyden%20Privacy%20Bill%20Discussion%20Draft%20Nov%201.pdf https://www.wyden.senate.gov/imo/media/doc/Wyden%20Privacy%2... Official sparknotes: https://www.wyden.senate.gov/imo/media/doc/Consumer%20Data%20Protection%20Act%20section%20by%20section.pdf https://www.wyden.senate.gov/imo/media/doc/Consumer%20Data%2... Official 1-pager: https://www.wyden.senate.gov/imo/media/doc/Wyden%20Privacy%20Bill%20one%20pager%20Nov%201.pdf https://www.wyden.senate.gov/imo/media/doc/Wyden%20Privacy%2...

joatmon-snoo 8y ago
Super nice to see legislation being proposed about this. Miscellaneous thoughts: - S7.b.1.D seems nice, but I can't help but wonder what it means to "verify" a consumer, and the potential for breaches that this poses. - S7.b.1.A "establish and implement reasonable cyber security and privacy policies, practices, and procedure" devil is in the details here, particularly what "reasonable" is defined to be - S6.b.1.B (paraphrasing, because the original text is a clusterfuck to comprehend, and I think I've got it right) companies must respect a consumer's opt-out, unless they allow a consumer to pay a fee, capped at the estimated value that the company would get out of said consumer's data I have no idea how S6.a.1 is going to go: "implement and maintain a ‘‘Do Not Track’’ data sharing opt-out website— (A) that allows consumers to opt-out of data sharing, view their opt-out status, and change their opt-out status; " No policy expertise here, sadly, so I have no idea how this will fare. As a techie, good first step.

joatmon-snoo 8y ago

Super nice to see legislation being proposed about this. Miscellaneous thoughts: - S7.b.1.D seems nice, but I can't help but wonder what it means to "verify" a consumer, and the potential for breaches that this poses. - S7.b.1.A "establish and implement reasonable cyber security and privacy policies, practices, and procedure" devil is in the details here, particularly what "reasonable" is defined to be - S6.b.1.B (paraphrasing, because the original text is a clusterfuck to comprehend, and I think I've got it right) companies must respect a consumer's opt-out, unless they allow a consumer to pay a fee, capped at the estimated value that the company would get out of said consumer's data I have no idea how S6.a.1 is going to go: "implement and maintain a ‘‘Do Not Track’’ data sharing opt-out website— (A) that allows consumers to opt-out of data sharing, view their opt-out status, and change their opt-out status; " No policy expertise here, sadly, so I have no idea how this will fare. As a techie, good first step.