Analysis The right for Californians to control the private data that tech companies hold on them may be undermined today at a critical committee hearing in Sacramento.
The Privacy And Consumer Protection Committee will hold a special hearing on Tuesday afternoon to discuss and vote on nine proposed amendments to the California Consumer Privacy Act (CCPA) – which was passed last year in the US state but has yet to come into force. Right now, the legislation is undergoing tweaks at the committee stage.
Privacy advocates are warning that most of the proposals before the privacy committee are influenced by the very industry that the law was supposed to constrain: big tech companies like Google, Facebook, and Amazon.
In most cases, the amendments seek to add carefully worded exemptions to the law that would benefit business at the cost of consumer rights. But most upsetting to privacy folk is the withdrawal of an amendment by Assemblymember Buffy Wicks (D-15th District) that incorporated changes that would enhance consumer data privacy rights.
Wicks' proposal would have given consumers more of a say of what is done with their personal data and more power to sue companies that break the rules. But the Assemblymember pulled the measure the day before the hearing because it was not going to get the necessary votes. If a measure is voted down it cannot be reintroduced in that legislative session.
“The public wants more consumer protections and assurances that their private information stays private,” said Wicks in a pretty meaningless canned statement to The Reg.
“I am proud to be a part of an impressive group of privacy and advocacy organizations looking to strengthen the landmark California Consumer Privacy Act. Big change is hard and I am committed to continue fighting for effective legislation that puts Californians consumer privacy first.”
Assemblymember Wicks will continue working with stakeholders and fellow legislator to bring it back to committee in 2020, her spokesperson said.
Among the proposals that will now be considered are:
The other four amendments are intended to clean up the law rather that create specific loopholes – such as exempting vehicle information from the rules, defining the meaning of "social media", and so on.
The amendments are just the latest example of the overweening influence of lobbyists in Sacramento. The law was only passed when a small group of Californians decided that the only way to constrain tech giants' vast databases of personal data was to put the issue to a direct voter ballot – because the issue would never make it through the normal policymaking processes thanks to special interests.
That ballot measure was pulled at the very last minute after the people behind it agreed that if Sacramento passed a privacy law, they would step away. The California Consumer Privacy Act was approved and signed into law in record time.
But before the law comes into effect, lawmakers are allowed to put forward amendments and Big Tech has been fighting furiously ever since to write loopholes into the law.
The worst proposed change is currently in the California Senate where state senate bill 753 would effectively exempt Google and Facebook's entire business models. ®