Security News > 2021 > April > After Virginia passes new privacy law, states race to catch up to CCPA and GDPR
Using Washington State's proposed law as a guide, New York, Texas and many other states are inching their way toward a data privacy law.
"Virginia is now just the second state to pass a comprehensive privacy bill. While we're pleased that Virginians will have new privacy rights, legislators should continue working in the next session to strengthen it. This bill has some important privacy provisions, but consumers need more practical options for controlling their data."
Clarke's company has worked with Intel to create a platform called Truyo that helps large companies automate compliance with existing privacy laws like CCPR and GDPR. Clarke has also been brought in by multiple states to consult on data privacy laws and testified before Congress on the need for a federal data privacy law.
"The Washington Privacy Act, although it hasn't actually passed yet, is actually more likely to be replicated by other states. In fact the Virginia Privacy Law is effectively the Washington Privacy law, yet it passed before it ironically," Clarke said.
I'd say, far more business-friendly than consumer-friendly. The CCPA set a benchmark for broad consumer privacy bills. It's a little hard to judge its effectiveness yet-regulatory waves move slowly-but, overall has a structure that we like better than the style we've seen come out of Washington, which imitates the GDPR language, but does not offer anything like its protections in any of the iterations I've seen," Tsukayama said, urging more states to fight harder for a private right of action.
"Top of the list would be meaningful enforcement, ideally in the form of a broad private right of action-the right for anyone to sue for privacy violations. In California, there is a limited private right of action for cases of data breach, which was expanded slightly under Prop 24. We'd like to see a private right of action for every violation of privacy laws. We also feel very strongly about nondiscrimination language, which makes clear that people who exercise their privacy rights won't be subject to higher prices or worse service for trying to protect themselves."