4 ms·

Any sign of the latest draft they're referring to? I didn't see a link in the post. The May 23 Innovation-Data-Commerce markup? I'd be interested to see what k

Any sign of the latest draft they're referring to? I didn't see a link in the post. The May 23 Innovation-Data-Commerce markup? I'd be interested to see what kind of non-discrimination provision was removed. A rule against discriminating against people for exercising their privacy rights, like we see in the California Consumer Privacy Act, GDPR, &c.? Or a more general, civil rights-style prohibition, perhaps incorporating a list of protected classes? They mention the new draft could be weaker than state laws it would preempt. I take it that's most likely a reference to California law. But it comes after discussion of a loophole they see for on-device data, not the part of about non-discrimination. It makes sense for a civil rights organization to want strong nondiscrimination language in a federal privacy bill. But I'm not sure we've seen those bundled in one law and passed before. We have with AI-specific legislation. If the APRA is turning into more of an Omnibus Big Tech Bad Behavior bill, AI regs included, that might make political sense.

jdp23 2y ago
A new draft was released last week -- the committee markup's on Thursday. https://iapp.org/news/a/new-draft-apra-released-ahead-of-27-june-markup/ https://iapp.org/news/a/new-draft-apra-released-ahead-of-27-... has a summary. https://punchbowl.news/wp-content/uploads/PRIVACY_05_xml-005.pdf https://punchbowl.news/wp-content/uploads/PRIVACY_05_xml-005... is the text. I htink there were three key sections that got cut out: 1) "A covered entity or service provider may not collect, process, retain, or transfer covered data in a manner that discriminates in or otherwise makes unavailable the equal enjoyment of goods or services on the basis of race, color, religion, national origin, sex, or disability." This was hugely important, it was sa major victory to get a bipartisan committee majority supporting similar language in APRA's predecessor ADPPA. 2) Requirements for algorithmic impact assessments by large companies (I forget the exact threshold). 3) A requirement to let people opt-out of consequencial automated decisions (with some exceptions), somewhat similar to California's CCPA.
- kemitchell 2y ago
  Thanks so much for taking time to share links and notes!

jdp23 2y ago

A new draft was released last week -- the committee markup's on Thursday. https://iapp.org/news/a/new-draft-apra-released-ahead-of-27-june-markup/ https://iapp.org/news/a/new-draft-apra-released-ahead-of-27-... has a summary. https://punchbowl.news/wp-content/uploads/PRIVACY_05_xml-005.pdf https://punchbowl.news/wp-content/uploads/PRIVACY_05_xml-005... is the text. I htink there were three key sections that got cut out: 1) "A covered entity or service provider may not collect, process, retain, or transfer covered data in a manner that discriminates in or otherwise makes unavailable the equal enjoyment of goods or services on the basis of race, color, religion, national origin, sex, or disability." This was hugely important, it was sa major victory to get a bipartisan committee majority supporting similar language in APRA's predecessor ADPPA. 2) Requirements for algorithmic impact assessments by large companies (I forget the exact threshold). 3) A requirement to let people opt-out of consequencial automated decisions (with some exceptions), somewhat similar to California's CCPA.

kemitchell 2y ago
Thanks so much for taking time to share links and notes!