Anyone who has ever worked on privacy at their company will be nodding in agreement with this entire paper.
Michelle Finneran Dennedy, JD @mdennedy
4 Jan 2020
YYYYEEEEEESSSSSSS! I testified to this exact point at the Senate Banking Committee. Where you have a disproportionately tiny and underfunded team, the law can say you will be boiled in oil & consumers lose.
1
2
That’s the entire issue w the CA vanity plate law—- no one asked the practitioners
1
1
Replying to @mdennedy
Yes, as the paper points out, the approach is risk minimization, not actual privacy protection. I liked the paper’s point about holding companies accountable ala product liability. It’s then not enough to minimally comply with the law, companies are on the hook for actual harms.

Jan 4, 2020 · 4:01 PM UTC