While temperatures are starting to dip, concerns still simmered in September for the insights industry as we dealt with more new state privacy laws, burgeoning regulation of AI, and other pressing advocacy issues.
Privacy and Data Security
IA analyzed three new comprehensive (or nearly comprehensive) state privacy laws in September:
- The Oregon Consumer Privacy Act (OCPA) was signed into law on July 18. It is based on Colorado's and Connecticut's recent laws, but with a few key differences.
- The Texas Data Privacy and Security Act was signed into law on June 18. It was modeled on Virginia’s law, and bears similarities to other recent state laws.
- A new health privacy law in Nevada, while not quite as comprehensive as a lot of the other recent state privacy laws, still will have a broad impact on the insights industry.
We also saw big changes to Connecticut’s existing comprehensive privacy law:
In the face of an ever-growing patchwork of U.S. state comprehensive consumer privacy and data security laws with which the insights industry must contend, the Insights Association launched a new centralized hub for compliance information with all these laws.
Meanwhile, Pennsylvania is considering its own comprehensive privacy legislation modeled on Connecticut's and Colorado’s laws.
On the so-called ‘data broker’ front, we saw:
As for online tracking technology, a new bulletin from the U.S. Health and Human Services Department (HHS) highlighted obligations for covered entities and business associates under the Health Insurance Portability and Accountability Act (HIPAA) when using such tech (and reminded them about civil penalties for violations).
Finally, three states have new laws restricting minors’ data privacy online that could impact market research online communities (MROCs):
- A new Texas law will require many social media platforms – and MROCs – to verify users, allow parents/guardians to access/control accounts of their kids under age 18, and filter harmful content.
- The Louisiana Secure Online Child Interaction and Age Limitation Act will restrict access to and use of social media platforms – and potentially larger MROCs – by Louisiana residents under the age of 16.
- The Arkansas Social Media Safety Act prohibits large social media platforms – potentially including some MROCs – from granting access to minors under age 18 absent parental consent, punishable by private lawsuits. It also restricts access by other companies to personal data on the platforms.
Artificial Intelligence (AI)
As insights companies and departments grapple with how to approach generative AI in their work, some proposed starting points for internal compliance checklists have come to light, complementing the Insights Association’s earlier compliance guidance for members.
A few states are starting to work on AI regulation, including:
As for Congressional action on AI in the U.S.:
- The Senate Judiciary Committee recently had a pair of interesting hearings about AI, one discussing how to approach AI regulation and the other considering “the impact of artificial intelligence on copyright law and policy and the creative community” from AI.
- The National AI Commission Act was proposed in the U.S. House to establish a commission to further the careful regulation of artificial intelligence; and
- Richard Blumenthal (D-CT) and Josh Hawley (R-MO), after referencing their ideas in multiple hearings this summer, promoted a 1-page summary of how they want to approach restricting AI, including with a centralized government regulator and enforcer, and a private right of action.
Finally, while our neighbors to the north have not approved legislation on AI, the Canadian Government proposed a voluntary code of conduct for AI on which it is currently seeking input.
Miscellaneous: Census; push polls
- With a potential government shutdown looming and major design decisions for the 2030 decennial census almost upon us, the Insights Association joined more than 90 groups urging higher funding for the Census Bureau in Fiscal Year 2024.
- Massachusetts legislation, modeled on New Hampshire‘s law that targets push polls for disclosures and transparency while protecting bona fide research (which IA helped to conceive and pass into law), received a hearing.
Your support makes all the difference
Without your support, the Insights Association cannot effectively advocate for the insights industry on these and other important public policy issues across America. IA’s members and sponsors provide the resources IA needs to defend and advance the whole industry.
We are always available to answer your questions on these and other legislative/regulatory/legal issues. Please keep in touch.
This information is not intended and should not be construed as or substituted for legal advice. It is provided for informational purposes only. It is advisable to consult with private counsel on the precise scope and interpretation of any laws/regulation/legislation and their impact on your particular business.