Do Not Sell My Personal Information: California Eyes Data Privacy Measure | Connecticut Public Radio
WNPR

Do Not Sell My Personal Information: California Eyes Data Privacy Measure

May 28, 2018
Originally published on May 28, 2018 7:58 pm

As Europe's sweeping new privacy law went into effect on Friday, California voters may get to decide on strict privacy laws for their state.

An initiative likely headed for November's ballot in California would be one of the broadest online privacy regulations in the U.S. and could impact standards throughout the country.

One of the initiative's biggest backers is Alastair Mactaggart, a San Francisco real estate developer. Mactaggart has put more than $2 million of his own money into getting the California Consumer Privacy Act of 2018 on the ballot. The initiative hasn't been officially certified by the state, but it has gotten more than 600,000 signatures, nearly twice what it needs to qualify.

Mactaggart recalls the moment about four years ago that turned him into a privacy advocate. He asked a Google engineer at a cocktail party whether he should be worried about his privacy. "He said, 'Oh if you just knew how much we knew about you, you'd be really worried,' " recalls Mactaggart.

Mactaggart says he and a small group of his neighbors consulted with academics, lawyers and technologists to write a bill they hope will curb privacy abuses. "What people are concerned about is misuse of their data," Mactaggart says, "and so we give people the right to say, 'Stop selling my information.' "

If voters approve the measure, businesses will be required to have a "clear and conspicuous link" on their website's homepage titled "Do Not Sell My Personal Information." The link would take users to a page where they can opt out of having their data sold or shared.

Mactaggart says the proposed law would not prevent Facebook, Google or a local newspaper from collecting users' data and using it to target ads to them. But users will have a right to stop companies from sharing or selling their data. And businesses would be required to disclose the categories of information they have on users — including home addresses, employment information and characteristics such as race and gender.

The measure has the backing of consumer advocacy groups, such as Consumers Union. Justin Brookman, Consumers Union's director of privacy and technology policy, says Europe's new law is stricter. "This ballot initiative is actually pretty modest," he says. "In some ways, I wish it would go further."

Still, if the California act passes, it will be one of the broadest privacy laws in the U.S. because it will affect anyone who goes on the Internet in California. And because California is the fifth-largest economy in the world, Brookman predicts many companies will implement the same standards nationally.

"Most companies aren't going to try to configure their systems to guess when an IP address is based in California," he says. "They'll say, 'You know what, this isn't that hard to do. We're just going to do it for the entire country.' "

But opponents of the measure say it will be hard to implement, and opposition has been fierce in a state that is home to Silicon Valley, where many tech companies are based.

"Every industry sector [that] has looked at this initiative considers it a very serious threat to the ability to do business in California," says Robert Callahan, vice president of state government affairs for the Internet Association. The group represents major tech companies, including Google, Facebook and Netflix.

Callahan says the measure would impose harsh financial penalties on companies that violate it, even if they make a small mistake. "Whether or not any harm or damages are received, the companies are strictly liable [for] thousands of dollars per violation," he says.

Proponents of the initiative say judges would have some discretion on the size of the fines. But Callahan doesn't think a privacy law should be written by advocates like Mactaggart and put on the ballot.

"Without any sort of process ... the proponents came up with this law," Callahan says. "[Mactaggart is] suggesting [this] should be the law of the land without any sort of public vetting or scrutiny and we think that's irresponsible and dangerous."

Supporters of the measure say neither Congress nor the California Legislature have acted on an issue that is increasingly important to voters, so they're taking matters into their own hands.

Copyright 2018 NPR. To see more, visit http://www.npr.org/.

MARY LOUISE KELLY, HOST:

California is also taking on the issue of online privacy. An initiative headed for November's ballot would be one of the broadest online privacy regulations in the U.S. and would likely affect standards throughout the country, as NPR's Laura Sydell reports.

LAURA SYDELL, BYLINE: Alastair Mactaggart is a very successful San Francisco real estate developer, and he recalls the moment that turned him into a privacy advocate. He asked a Google engineer at a cocktail party if he should be worried about his privacy.

ALASTAIR MACTAGGART: And he said, oh, if you just knew how much we knew about you, you'd be really worried.

SYDELL: That worried Mactaggart. He is now one of the biggest backers of California's Consumer Privacy Act of 2018. He put his own money on the line - more than $2 million to get the act on the ballot. The ballot measure got hundreds of thousands of signatures. Mactaggart says he and a small group of his neighbors consulted with academics, lawyers and technologists to write a law they hope will curb privacy abuses.

MACTAGGART: What people are concerned about is misuse of their data. And so we give the people the right to say stop selling my information.

SYDELL: If the act is approved by voters, businesses will be required to have a clearly visible home page link that lets users opt out of having their data sold or shared. Mactaggart says the act does not prevent Facebook or Google or your local newspaper from collecting your data and using it to target ads to you. You just have a right to stop companies that share or sell your data. Companies must disclose the categories of information they have on you, like home addresses, employment information, characteristics, like race, gender. The law has the backing of consumer advocacy groups like Consumers Union. Justin Brookman is the director of consumer privacy and technology policy there. He says Europe's new law is stricter.

JUSTIN BROOKMAN: This ballot initiative is actually pretty modest. In some ways, I wish it would go further.

SYDELL: Still, if this act passes, it will be one of the broadest privacy laws in the U.S. because it will affect anyone who goes on the Internet in California. And because it's California, the fifth-largest economy in the world, Brookman thinks many companies will implement the same standards nationally.

BROOKMAN: Most companies aren't going to try to configure their systems to guess when an IP address is based in California. They'll say, you know what? This isn't that hard to do. We're just going to do it for the entire country.

SYDELL: Opposition to the initiative by tech companies is fierce. California is the home of Silicon Valley where a lot of the companies are based. Robert Callahan is the vice president of state government affairs for the Internet Association. It represents Facebook, Google, Netflix and many other companies.

ROBERT CALLAHAN: And every industry sector who has looked at this initiative considers it a very serious threat to the ability to do business in California.

SYDELL: Callahan says the bill imposes harsh financial penalties on companies that violate it, even if they make a small mistake.

CALLAHAN: Whether or not any harm or damages were received, the companies are strictly liable in thousands of dollars per violation.

SYDELL: Proponents of the California initiative say the act gives judges some discretion on the size of the fines. But Callahan doesn't think a privacy law should be written by advocates like Mactaggart and put on a ballot.

CALLAHAN: Without any sort of process, you know, the proponents came up with this law that he's suggesting should be the law of the land without any sort of public vetting or scrutiny. And we think that's irresponsible and dangerous.

SYDELL: Supporters of the act say neither the U.S. Congress nor the California legislature have acted, so they're taking matters into their own hands. The initiative hasn't been officially certified by the state, but given that it has more than enough signatures, it's nearly certain to be in front of the California voters in November. Laura Sydell, NPR News. Transcript provided by NPR, Copyright NPR.