{"id":1185,"date":"2011-04-11T15:56:21","date_gmt":"2011-04-11T23:56:21","guid":{"rendered":"\/?p=1185"},"modified":"2011-04-11T16:16:44","modified_gmt":"2011-04-12T00:16:44","slug":"kerry-mccain-bill-proposes-minimal-disclosure-for-specific-purpose","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=1185","title":{"rendered":"Kerry McCain bill proposes &#8220;minimal disclosure&#8221; for transaction"},"content":{"rendered":"<p class=\"body\"><a href=\"http:\/\/www.cov.com\/\">Steve Satterfield<\/a> at <a href=\"http:\/\/www.insideprivacy.com\/united-states\/kerry-mccain-circulate-commercial-privacy-bill-of-rights\/\" class=\"broken_link\">Inside Privacy<\/a> gives us this overview of central features of new <a href=\"http:\/\/www.insideprivacy.com\/KerryDraftPrivacyBill.pdf\" class=\"broken_link\">Commercial Privacy Bill of Rights<\/a> proposed by US Senators Kerry and McCain (<a href=\"\/wp-content\/images\/2011\/04\/KerryDraftPrivacyBill.pdf\">download it here<\/a>):<\/p>\n<div class=\"body\">\n<ul>\n<li style=\"PADDING-LEFT: 30px\">The draft\u00a0envisions a significant role for the FTC and includes provisions\u00a0requiring the FTC to promulgate rules on a number of important issues, including\u00a0the appropriate consent mechanism for\u00a0uses of data.\u00a0 The FTC would also be tasked with issuing rules obligating businesses to provide reasonable security measures for the consumer data they\u00a0maintain and to provide transparent notices about data practices.<\/li>\n<li style=\"PADDING-LEFT: 30px\"><em>The\u00a0draft also\u00a0states that businesses should &#8220;seek&#8221; to collect only as much &#8220;covered information&#8221;\u00a0as is reasonably necessary to provide a transaction or\u00a0service requested by an individual, to prevent fraud,\u00a0or to\u00a0improve the transaction or service <\/em><\/li>\n<li style=\"PADDING-LEFT: 30px\">&#8220;Covered information&#8221; is defined\u00a0broadly and would include not just &#8220;personally identifiable information&#8221; (such as name, address,\u00a0telephone number,\u00a0social security number),\u00a0but <em>also &#8220;unique\u00a0identifier information,&#8221; including a customer number held in a cookie, a user ID, a processor serial number or a device serial number<\/em>.\u00a0\u00a0Unlike definitions of &#8220;covered information&#8221;\u00a0that appear in separate bills authored by\u00a0Reps. <a href=\"http:\/\/www.insideprivacy.com\/RushBill2011.pdf\" class=\"broken_link\">Bobby Rush<\/a>\u00a0(D-Ill.) and <a href=\"http:\/\/www.insideprivacy.com\/SpeierDNT.pdf\" class=\"broken_link\">Jackie Speier<\/a>\u00a0(D-Cal.), this definition specifically covers cookies and device IDs.<\/li>\n<li style=\"PADDING-LEFT: 30px\">The draft encompasses a data retention principle, providing that businesses should only\u00a0retain\u00a0covered information only as long\u00a0as necessary to provide the transaction or service &#8220;or for\u00a0a reasonable period of time if the service is ongoing.&#8221;\u00a0<\/li>\n<li style=\"PADDING-LEFT: 30px\">The draft contemplates enforcement by the FTC and state attorneys general.\u00a0 Notably &#8212; and in contrast to Rep. Rush&#39;s bill &#8212; the draft does <em>not<\/em>\u00a0provide a privacy right\u00a0of action for individuals who\u00a0are affected by a violation.\u00a0<\/li>\n<li style=\"PADDING-LEFT: 30px\">Nor does the bill specifically address the much-debated &#8220;Do Not Track&#8221; opt-out mechanism that was recommended\u00a0in the <a href=\"http:\/\/www.ftc.gov\/os\/2010\/12\/101201privacyreport.pdf\">FTC&#39;s recent staff report <\/a>on consumer privacy.\u00a0 (You can read our analysis of that report <a href=\"http:\/\/www.cov.com\/files\/Publication\/fb16b0ae-4bc3-444d-b48f-12e94cbd4ce1\/Presentation\/PublicationAttachment\/c3936e6a-25e6-4e62-8bad-2aebd9ed4bfb\/FTC%20Announces%20Proposed%20Framework%20for%20Regulating%20Consumer%20Privacy.pdf\">here<\/a>.)\u00a0<\/li>\n<\/ul>\n<\/div>\n<p style=\"PADDING-LEFT: 30px\">As noted above, the draft is\u00a0reportedly still\u00a0a work in progress.\u00a0 <em>Inside Privacy<\/em> will provide additional commentary\u00a0on the Kerry legislation and other congressional\u00a0privacy efforts as they develop.\u00a0\u00a0\u00a0<\/p>\n<p>Press conference will be held <a href=\"http:\/\/kerry.senate.gov\/press\/release\/?id=487927AD-F08C-4E5D-B428-1CB0993041E1\" class=\"broken_link\">tomorrow at 12:30 pm<\/a>.\u00a0 [Emphasis above is mine &#8211; Kim]<\/p>\n<p>Readers of\u00a0Identityblog will understand that I see this development, like so many others, as inevitable and predictable consequences of many short-sighted industry players breaking the <a href=\"https:\/\/www.identityblog.com\/stories\/2005\/05\/13\/TheLawsOfIdentity.pdf\">Laws of Identity<\/a>.<\/p>\n<p>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Seminal advance: definition of &#8220;covered information&#8221; specifically includes device IDs.<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[37,6,68,40,11],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1185"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1185"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1185\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}