👋 Hello, August. Last week the California Privacy Protection Agency held a special meeting where they considered the ADPPA. No decisions were made, but the waters are shaky at best. 

In this edition: 

• My experience attending Vice President Harris's roundtable
• A webinar roundup chock-full of expert insights
• AMA highlights from our session with SixFifty 

–DeAndrea Salvador

DG SPOTLIGHT

A Warm Welcome

We're on a mission to bring privacy rights for all, so it's only fitting that the members of our team feel equally passionate about transparency and trust. Last week, DataGrail welcomed not one, but two tech industry titans to our team. Read the blog to learn how Sam and Cathy discovered their love for privacy and what brought them to DataGrail.

REGULATION REFLECTIONS

DeAndrea's Roundtable with Vice President Harris

I was honored to attend a roundtable with Vice President Kamala Harris. The roundtable touched upon reproductive rights and digital inclusion, interlinking with the fundamental right to privacy.

The recent supreme court ruling revealed how the United States sectoral-based privacy laws could create gaps in privacy for US residents and highlight the need for comprehensive privacy protections.

In lieu of a solid federal provision, we learned how even with the Supreme Court ruling in West Virginia vs. EPA (which many feels could stifle the rule-making ability of regulatory bodies) that the executive branch still showcases confidence in the FTC and FCC to protect the privacy rights of individuals (particularly against unfair and deceptive practices). 

The White House shared one takeaway:

"The FTC committed to fully enforcing the law against illegal use and sharing of highly sensitive data, including location and health information contained in fertility and period tracking data. The FTC urged companies to consider that sensitive data is protected by numerous state and federal laws, claims that data is “anonymous” are often deceptive, and the FTC has a track record of cracking down on companies that misuse consumer data."

This is in addition to FCC Chairwoman probing major wireless carriers to investigate their data privacy practices. The administration also seemed hard-pressed to lean on the privacy right between providers and patients. 

The message was apparent in the absence of federal law (despite efforts being made). The executive branch keeps its foot on the gas to seek privacy protections through existing laws and regulations. However, greater protections via state and federal legislation are more than warranted. 

WEBINAR REWIND

Meet DataGrail

Bookmark this 30-minute session for your midday break. Catch up with the DataGrail crew as our in-house experts dive into recent industry news and trends and unpack the latest in privacy tech.

Unpacking CPRA + 2023 Predictions

Join experts from Drift and DataGrail for a CPRA tell-all. You'll learn what changes the new year will bring and hear predictions for how the CPRA will help shape the privacy landscape in 2023.

State of US Privacy

It's not just California – states across the nation are introducing new privacy legislation. Learn how new state laws will impact your program and what you need to be doing right now to prepare.

ASK AN EXPERT

Privacy Q&A 🙋‍♀️

What happens when the Former Assistant Dean of BYU Law, a current state legislator, and CIPP/US certified digital privacy expert all jump on a Zoom? You get your questions answered! Here's a highlight from our recent Ask Me Anything session with SixFifty.

Q: If deletion exemptions apply to all of the data I collect/process, do I still have to offer consumers the option of requesting a deletion? 

A: Yes – the laws require that covered institutions follow all of the notice requirements, tell consumers about all of their rights under the applicable law, and offer them an opportunity to exercise those rights. Organizations may have exemptions for some of the DSAR requests they receive. Still, they're legally required to answer the consumers and explain the reason (i.e. the exemption) that they deny the consumer's request.

TL;DR: While you may not have to delete the data, you have to offer the right and why it was exempt.

If you're interested in seeing the full Q&A, watch the webinar on-demand here.

PRIVACY 101

Data Mapping Deep-Dive

Data Mapping Best Practices

Handle with care. Read up on our data mapping best practices to ensure all customer data is in the proper place.

How Data Mapping Enhances Privacy

Data Mapping – what's it all for? This blog breaks down the "why" behind this (sometimes tedious) process.