At a speech to the Federal Trade Commission today, President Obama will announce a number of cybersecurity and privacy proposals. In a statement released this morning, the White House noted that consumer concerns about cybersecurity threats and identity theft “can lead to less interaction with technology, less innovation, and a less productive economy.”
Below is a summary of the proposals that Obama plans to highlight today:
-
National data breach notification: Obama will propose the Personal Data Notification & Protection Act, which would establish a requirement for businesses to notify consumers of a data breach within 30 days of discovering the breach. The bill would create a nationwide notification standard and preempt existing state laws that have different reporting rules. The White House proposal comes on the heels of a number of similar bills introduced last year by members of both parties. After the White House releases the text of the legislation, InsidePrivacy will have a detailed analysis of the bill. Obama also will announce that JP MorganChase and Bank of America will provide credit scores to their consumers for free.
-
Consumer privacy bill of rights. Within 45 days, the White House will propose legislation that would codify the Administration’s 2012 Consumer Privacy Bill of Rights, which identifies seven principles that apply to personal data. Those principles are individual control, transparency, request for context, security, access and accuracy, focused collection, and accountability.
-
Student privacy: Obama also will propose the Student Digital Privacy Act. Modeled after a California law, Obama’s proposal would prohibit companies from selling student data for purposes unrelated to education and from targeting advertising to students. InsidePrivacy will provide a more comprehensive analysis of the bill once the text is released. Obama also will announce that 75 companies have agreed to a pledge to prevent misuse of student data.
-
Smart grid privacy: The Energy Department and Federal Smart Grid Task Force will release a voluntary code of conduct that is intended to protect energy consumer data, such as energy usage information.
InsidePrivacy will provide more details of the proposals as they are released.