Anyone who has ever worked on privacy at their company will be nodding in agreement with this entire paper.
Michelle Finneran Dennedy, JD @mdennedy
4 Jan 2020
YYYYEEEEEESSSSSSS! I testified to this exact point at the Senate Banking Committee. Where you have a disproportionately tiny and underfunded team, the law can say you will be boiled in oil & consumers lose.

Jan 4, 2020 · 3:25 PM UTC

1
2
Replying to @bilcorry
That’s the entire issue w the CA vanity plate law—- no one asked the practitioners
1
1
Yes, as the paper points out, the approach is risk minimization, not actual privacy protection. I liked the paper’s point about holding companies accountable ala product liability. It’s then not enough to minimally comply with the law, companies are on the hook for actual harms.