Federal Trade Commission, Department of Commerce Seek Comment on Regulatory Proposals for Data Privacy
Companies that may be subject to new privacy rules for consumer, employee, and other personal information, which are expected to be adopted in the first half of 2011, should consider filing comments on recommendations contained in the reports recently issued by the Federal Trade Commission ("FTC") and the Department of Commerce ("Commerce").
Comments on the Commerce report are due January 28, 2011 and comments on the FTC report are due January 31, 2011.
The FTC in December released a preliminary staff report entitled: "Protecting Consumer Privacy in an Era of Rapid Change: A Proposed Framework for Businesses and Policymakers" ("FTC Report"). The FTC proposed major changes to its existing regulatory framework to accommodate the rapidly-changing privacy/technology landscape, focusing on three components:
- Privacy by Design – incorporating privacy protections into the design of products, services, and processes;
- Simplified Choice – enabling consumers to readily opt into or out of personal data collection; and
- Greater Transparency – clearly disclosing data collection practices.
One of the most controversial elements of the FTC Report is its recommendation that a "Do Not Track" mechanism akin to the FTC’s successful "Do Not Call" list be implemented to limit online data collection and targeted advertising.
The FTC posed a series of 64 questions for comment. It is anticipated that comments submitted by businesses, particularly regarding the cost and feasibility of implementing Do Not Track and other recommendations in the FTC Report, will have a significant influence on how the agency will regulate the collection and handling of personal information going forward. For example, the FTC is seeking comments on what types of data collection should be considered "commonly accepted" and not requiring prior consent, and whether opt-out or opt-in regimes are appropriate for data falling outside the "commonly accepted" definition – a crucial distinction for many businesses, which will significantly impact the cost of compliance.