The Council of Europe has begun work on data protection and neurotechnology guidelines, which it expects to complete in around two years, sources told us. The interplay between neurotechnology and data protection is important given the growing use of the technology beyond the medical sphere, speakers said at a Data Protection Day conference in Brussels on Tuesday.
Data Minimization
Data minimization is a core privacy principle requiring organizations to limit the personal data they collect, process and retain to only what is necessary for a specific purpose. Maryland’s data privacy law sets one of the nation’s strictest standards mandating that companies collect only the minimum data needed and prohibiting use beyond that stated purpose. The approach has drawn attention from other states with several exploring similar provisions to curb overcollection and reduce the risks of misuse, breaches and noncompliance.
A Washington state privacy bill with a private right of action is scheduled for a first hearing on Feb. 4 at 10:30 a.m. PT in the House Technology Committee. Rep. Shelley Kloba (D) introduced HB-1671 on Tuesday.
Palo Alto Networks supports passage of a comprehensive federal privacy law, a senior official at the cybersecurity company said Tuesday.
A South Carolina House Judiciary subcommittee heard some debate but didn't get to a vote on a bill regulating social media for minors on Wednesday.
Washington state Rep. Shelley Kloba (D) filed comprehensive privacy legislation (HB-1671) on Tuesday after previously carrying such bills in prior sessions.
Utah and Arizona bills requiring age verification online advanced in committee votes this week. Many states are mulling legislation this year focused on protecting kids on certain websites (see 2501170053).
Almost half the states with consumer privacy laws get failing grades for protecting consumer data and none received an “A,” the Electronic Privacy Information Center said Tuesday.
"A strong data privacy bill must include a private right of action to allow … individuals to bring a lawsuit when they suffer actual damages,” Vermont Attorney General Charity Clark (D) said Monday. At a livestreamed press conference, Clark supported state Rep. Monique Priestley (D) in reintroducing a privacy bill that Gov. Phil Scott (R) vetoed last year. Priestley said the 2025 bill will also include data minimization rules, despite business concerns stemming from Maryland’s law, which includes such requirements.
Consumer privacy groups applauded multiple Massachusetts privacy bills introduced last week.
Pursuing data security claims against companies was "top-of-mind" for state attorneys general in 2024 and this will probably continue through the year, Morrison Foerster partners Linda Clark and Kathryn Taylor blogged Friday.