I’ve been reading through the bill and I have concerns. The bill requires data brokers to register with the commission and they store PII sufficient to identify an individual. Because the registered brokers must report back that they’ve removed the data, it does give the commission an awful lot of data on people’s online activities. Not everyone wants their data linked that way. But as long as I can still do things the hard way, I’m not opposed.
Those data brokers also are subject to data retention laws, which were specifically in place to make sure that all data could be collected in a certain time period. It doesn’t matter if they delete everything after 6 months so long as it was copied to an entity not subject to these deletion laws by then (and it is)
I’ve been reading through the bill and I have concerns. The bill requires data brokers to register with the commission and they store PII sufficient to identify an individual. Because the registered brokers must report back that they’ve removed the data, it does give the commission an awful lot of data on people’s online activities. Not everyone wants their data linked that way. But as long as I can still do things the hard way, I’m not opposed.
Those data brokers also are subject to data retention laws, which were specifically in place to make sure that all data could be collected in a certain time period. It doesn’t matter if they delete everything after 6 months so long as it was copied to an entity not subject to these deletion laws by then (and it is)
I’d support a law that required brokers to disclose every entity they copied / shared the data with, but I’m convinced that would be a nonstarter.