Pittsburgh, PA
Smart Business
(By Adam Burroughs featuring Ember Holmes)
Several states have passed or are in the process of implementing data privacy laws, largely in an effort to put control of consumers’ information back into the hands of the consumer.
Four states — California, Colorado, Connecticut and Virginia — have data privacy laws that are already in effect. There also are states — Indiana, Iowa, Montana, Tennessee, Texas and Utah — where the laws have been passed and are set to go into effect at some point in the next three years. Additionally, there are six states — Delaware, Massachusetts, New Jersey, North Carolina, Oregon and Pennsylvania — where bills relating to data privacy have been introduced and are at different stages of the legislative process.
“One common theme of the various laws is to shift the default for companies that collect and sell consumer data from assumed, passive consent to express, active consent,” says Ember K. Holmes an Associate at Babst Calland. “These laws also give consumers the right to opt out of having their data collected, or to have their data deleted if it has already been collected.”
While the aim of these laws is similar, each is unique. That’s making it difficult for companies across sectors to understand how these laws affect their business and avoid what are often significant penalties for noncompliance.
Smart Business spoke with Holmes about data privacy laws states are enacting and how they are going to affect companies.
Why might data privacy laws in one state affect a company that’s headquartered in another?
Although Pennsylvania does not have a robust body of privacy laws, organizations may have obligations under the privacy laws of other states. …