Key developments
House Republicans unveil sweeping privacy preemption bill
The Record's Suzanne Smalley reported that House Republicans introduced the SECURE Data Act on April 23 after 14 months of drafting by a GOP Privacy Working Group. Backed by senior Republicans on the Energy and Commerce and Financial Services committees, the bill would preempt at least 20 state privacy laws, limit collection to data that is adequate, relevant and reasonably necessary, and require the FTC to build a searchable data-broker registry. Critics said the draft's sensitive-data definitions are too narrow, its exemptions are broad, and it includes no private right of action.
Why it matters
It could reset the U.S. privacy baseline and sharply limit stronger state laws.
Sources & driving stories
THE RECORD · Suzanne Smalley
The Record coverageAlaska sued over voter data sharing
Democracy Docket reported that the League of Women Voters of Alaska and the Alaska Black Caucus filed suit on April 23 over the state's transfer of unredacted voter-registration data to the DOJ. The complaint says the records included full names, birthdates, residential addresses, driver's license numbers and partial Social Security numbers, and challenges a memorandum of understanding that requires Alaska to clean its rolls within 45 days of DOJ notices without independent verification. The plaintiffs want the agreement voided, future sharing blocked and the DOJ ordered to destroy the data.
Why it matters
The case could set limits on how far state privacy protections reach when election data is shared with federal officials.
Sources & driving stories
DEMOCRACY DOCKET
Democracy Docket coverageConnecticut Senate advances consumer privacy bill
CT Mirror reported that the Connecticut Senate passed S.B. 4 on April 23, advancing a consumer data protection bill aimed at data brokers. The measure would create a broker registry, direct the Department of Consumer Protection to build a system for deleting personal data from broker sites and databases, and add rules covering geolocation data, facial recognition, surveillance pricing, biological data and genetic data. Supporters said it would reduce scams and give consumers more control, while critics warned about broad definitions and business burdens.
Why it matters
It advances one of the more expansive state privacy packages and would add new obligations for brokers and surveillance-style data uses.
Sources & driving stories
CT MIRROR
CT Mirror coverageWorth noting
WORTH NOTING
Murray's Cheese breach exposed SSNs
Dapeer Law's Valeria Linares reported that the breach notice followed unauthorized access to files containing names, Social Security numbers, dates of birth, health-plan details, financial account information and medical records.
WORTH NOTING
Rituals Cosmetics member records exfiltrated
Technadu reported that attackers accessed My Rituals membership records across the EU, UK and U.S., exposing names, dates of birth, genders, postal addresses, email addresses and phone numbers.
Still unclear
OPEN QUESTION
Will SECURE Data Act keep broad preemption?
The bill's ability to survive criticism over state preemption and the lack of a private right of action will likely determine whether it advances in Congress.
OPEN QUESTION
Can Alaska block DOJ voter-data use?
The lawsuit will test whether Alaska's explicit privacy protections can stop federal access to voter-roll data and roll-cleaning demands.