AI Bellwethers in the US and EU
Hello all, and thanks for reading today.
Read NowGet an overview of the simple, all-in-one data privacy platform
Manage consent for data privacy laws in 50+ countries
Streamline and automate the DSAR workflow
Efficiently manage assessment workflows using custom or pre-built templates
Streamline consent, utilize non-cookie data, and enhance customer trust
Automate and visualize data store discovery and classification
Ensure your customers’ data is in good hands
Key Features & Integrations
Discover how Osano supports CPRA compliance
Learn about the CCPA and how Osano can help
Achieve compliance with one of the world’s most comprehensive data privacy laws
Key resources on all things data privacy
Expert insights on all things privacy
Key resources to further your data privacy education
Meet some of the 5,000+ leaders using Osano to transform their privacy programs
A guide to data privacy in the U.S.
What's the latest from Osano?
Data privacy is complex but you're not alone
Join our weekly newsletter with over 35,000 subscribers
Global experts share insights and compelling personal stories about the critical importance of data privacy
Osano CEO, Arlo Gilbert, covers the history of data privacy and how companies can start a privacy program
Upcoming webinars and in-person events designed for privacy professionals
The Osano story
Become an Osanian and help us build the future of privacy!
We’re eager to hear from you
Published: June 27, 2024
Hello all, and happy Thursday!
The American Privacy Rights Act (APRA) continues its slow but steady pace through the U.S. legislative process—but the Electronic Frontiers Foundation (EFF) has officially come out to oppose the bill.
The grounds for their opposition won’t surprise anyone who followed the American Data Privacy Protection Act (ADPPA). As was the case with the ADPPA, APRA’s fatal flaw lies in preemption.
Having learned from the ADPPA, the APRA does include some language that would allow certain features from other laws to take precedence when applicable, such as the CCPA’s requirements around employee data. However, in their statement, the EFF lists several laws that would be rendered effectively moot should the APRA become law, including laws protecting AI regulation in Colorado, internet privacy in Maine, healthcare and tenant privacy in New York, and biometric privacy in Illinois.
Most businesses would obviously prefer a federal law that sets a ceiling: that way, they know with absolute certainty what the strictest requirements are that they’ll have to meet regardless of where they operate. But organizations like the EFF or ACLU that focus more on consumer protections prefer a federal law that sets a floor: that way, consumers know with absolute certainty that they have certain rights at minimum.
With more and more state data privacy laws, it’s getting harder to picture a world where there’s enough political will and motivation to compromise on this issue. Ultimately, the APRA’s fate might boil down to whether the U.S. can best tolerate a data privacy ceiling or floor.
Best,
Arlo
Apple briefly held talks with Meta about the possibility of integrating Meta’s AI models back in March. However, the company has shelved the idea of putting Meta’s AI models on iPhones over privacy concerns. Instead, Apple released its own suite of AI features earlier this month under the Apple Intelligence brand. Plus, it announced a partnership with OpenAI to let iPhone users invoke ChatGPT for certain queries.
The new Dutch government wants to allow the police to use commercial DNA databases in cold case criminal investigations. Though such a proposal could help solve unsolved crimes, legal experts have raised privacy concerns.
Today (June 27th), the U.S. House Committee will mark up 11 proposed bills, notably including the American Privacy Rights Act (APRA) as well as the Kids Online Safety Act. It is widely believed that the APRA will need to go through multiple changes if it is to be enacted into law.
The Electronic Frontiers Foundation (EFF) has come out in opposition to the APRA, stating that “federal privacy laws should not roll back state privacy protections. And there is no reason that we must trade strong state laws for weaker national privacy protection.” The EFF has also released a statement indicating that it informed Congress of its opposition and signed two letters to reiterate why overriding stronger state laws and preventing states from passing stronger laws was a dangerous practice.
European Union (EU) regulators on Monday opened a new investigation into Apple's support for alternative iOS marketplaces in Europe under the Digital Markets Act (DMA), adding that the App Store's "steering" policies violate the DMA meant to encourage competition.
Read more
Most U.S. privacy laws have centered around a few common requirements—but Maryland has bucked the trend. Find out what’s unique about the MODPA and how you can comply here.
If you’re interested in working at Osano, check out our Careers page!
Arlo Gilbert is the CEO & co-founder of Osano. An Austin, Texas native, he has been building software companies for more than 25 years in categories including telecom, payments, procurement, and compliance. In 2005 Arlo invented voice commerce, he has testified before congress on technology issues, and is a frequent speaker on data privacy rights.
Osano is used by the world's most innovative and forward-thinking companies to easily manage and monitor their privacy compliance.
With Osano, building, managing, and scaling your privacy program becomes simple. Schedule a demo or try a free 30-day trial today.