Tag Archives: Department of Commerce

Centre Files Comments with NTIA to Develop Consumer Privacy Codes of Conduct

Drawing on its eleven years of experience facilitating multistakeholder processes, on April 2, 2012, the Centre for Information Policy Leadership at Hunton & Williams LLP filed comments in response to the Department of Commerce’s National Telecommunications and Information Administration’s request for public comments on the multistakeholder process to develop consumer data privacy codes of conduct. The NTIA’s request relates to the topics and processes that will inform the creation of binding codes of conduct as discussed in the Obama Administration’s February release of a framework for a Consumer Privacy Bill of Rights.

In its remarks, the Centre indicated support for the multistakeholder approach, but proposed a process that would allow industry stakeholders the opportunity to engage in frank discussions among themselves, without media coverage or concern that their comments might be recorded. While the Centre’s proposal emphasized that industry should draft codes of best practices, it also highlighted the need for feedback from experts, advocates and regulators, specifically through a public workshop and written comment period. The Centre also urged the multistakeholder working group to prioritize the development of industry best practices for accountability.

Tags: , , ,

FTC Privacy Report Emphasizes Privacy by Design, Individual Control and Transparency

On March 26, 2012, the Federal Trade Commission issued a new privacy report entitled “Protecting Consumer Privacy in an Era of Rapid Change: A Proposed Framework for Businesses and Policymakers.” The report charts a path forward for companies to act in the interest of protecting consumer privacy.

In his introductory remarks, FTC Chairman Jon Leibowitz indicated his support for Do Not Track stating, “Simply put, your computer is your property; no one has the right to put anything on it that you don’t want.” In later comments he predicted that if effective Do Not Track mechanisms are not available by the end of this year, the new Congress likely would introduce a legislative solution.

Continue reading…

Tags: , , , , , , , , , , , , , ,

EU-U.S. Interoperability Not Ready for Prime Time

On March 19, 2012, the European Commission hosted this year’s Safe Harbor Conference in Washington, D.C., to address the transfer of data from Europe to the United States. Although it appears the Safe Harbor framework will remain unchanged for the time being, it seems unlikely the United States will be considered adequate, or even interoperable, with the EU for purposes of cross-border data transfers.

Continue reading…

Tags: , , , , , , ,

NTIA Extends Deadline for Comments on Developing Consumer Data Privacy Codes of Conduct

On March 21, 2012, the U.S. Department of Commerce’s National Telecommunications and Information Administration announced a one-week extension to the deadline for responses to their March 2 request for public comments on the multistakeholder process to develop consumer data privacy codes of conduct. Comments are now due on Monday, April 2, 2012. The request for comments relates to both the topics and processes that will inform the creation of binding codes of conduct as discussed in the Obama Administration’s February release of a framework for a Consumer Privacy Bill of Rights.

The Centre for Information Policy Leadership at Hunton & Williams will be submitting comments.

Tags: , , ,

Sotto Discusses White House Administration’s Consumer Privacy Bill of Rights

On February 24, 2012, Eric Chabrow of BankInfoSecurity interviewed Lisa J. Sotto, partner and head of the Global Privacy and Data Security practice at Hunton & Williams LLP. Discussing the need for a Consumer Privacy Bill of Rights, Sotto briefly outlined the strengths and weaknesses of the proposed bill, and its potential impact on businesses.

Read the interview or listen to the podcast, which can be streamed or downloaded as an MP3 on the BankInfoSecurity website.

Tags: , , , , ,

White House Announces Its Highly Anticipated Consumer Privacy Bill of Rights

The White House today released its long-awaited report outlining a framework for U.S. data protection and privacy policy. As expected, “Consumer Data Privacy in a Networked World: A Framework for Protecting Privacy and Promoting Global Innovation in the Global Digital Economy” articulates a Consumer Privacy Bill of Rights based on the individual’s right to exercise control over what personal data companies collect from the individual and how companies use the data. The Consumer Privacy Bill of Rights, which reflects principles of fair information practices and applies to personal data, sets forth individual rights for consumers and corresponding obligations of companies in connection with personal data. It also provides for the consumer’s right to:

  • transparent privacy and data security practices;
  • expect that companies will collect, use and disclose data in a manner consistent with the context in which it was collected;
  • have their data handled in a secure manner;
  • access and correct personal data;
  • set reasonable limits on the personal data that companies collect and retain; and
  • have personal data handled by companies with appropriate measures in place to assure they adhere to the Consumer Privacy Bill of Rights.

Continue reading…

Tags: , , , , , , , ,

European Commission to Host Safe Harbor Conference on March 19 in Washington

The U.S. Department of Commerce has confirmed that the European Commission will host this year’s Safe Harbor Conference in Washington, D.C., on March 19, 2012. The venue marks a change from the tradition of previous sessions which have taken place in the host authority’s capital city (Washington, D.C. or Brussels). The Conference will follow the release of the European Commission’s draft revisions to the EU Data Protection Directive 95/46, which are expected on or around January 25, 2012. The widely leaked draft of the proposal does not contain language pertaining to the current Safe Harbor program that exists between the United States and Europe. The European Commission and the U.S. Department of Commerce will negotiate the Safe Harbor Conference agenda over the next few weeks.

Tags: , , ,

English Translation of Peru’s Law for Personal Data Protection Released

The Department of Commerce released an English translation of Peru’s Law for Personal Data Protection (Ley de Protección de Datos Personales, Ley No. 29733).  The law passed Peru’s Congress on June 7, 2011, and was signed by the president July 2, 2011.  Peru’s adoption of this new law is in keeping with a recent trend in Latin America, where Uruguay, Mexico and Colombia also have passed privacy legislation.

Continue reading…

Tags: , , , , , , , , ,

Mexico’s Draft Privacy Regulations: English Translation

As we previously reported, the Mexican government has developed draft regulations for the implementation of Mexico’s Federal Law on the Protection of Personal Data in the Possession of Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares). The U.S. Department of Commerce recently circulated an English translation of the draft regulations. Public comments on the draft are due on August 3, 2011, and Mexican officials have indicated they will not grant extensions for late submissions. A final version of the regulations is expected to go into effect in January 2012. 

Access the text of the draft regulations in English.

Access the text of the draft regulations in Spanish.

Tags: ,

Commerce Department Shares Guidance on Mexico’s New Data Protection Law

On June 24, 2011, the U.S. Department of Commerce’s International Trade Administration released a PowerPoint presentation on Mexico’s new private sector data protection law that was shared at a meeting of the OECD Working Party on Information Security and Privacy by Mexico’s Ministry of Economy and Federal Institute for Access to Information and Data Protection (“IFAI”).  The presentation provides guidance on the creation of privacy notices and establishment of self-regulatory schemes, and also outlines the responsibilities of the Ministry of Economy and the IFAI with respect to implementation of the law.  As we previously reported, the requirements concerning self-regulation and providing privacy notices to consumers go into effect this July, with the balance of the law, granting individual participation rights to consumers, effective in January 2012.

Tags: , , ,