Connect with us

Privacy

Experts Warn Against Private Right to Action Laws on Data Privacy Day

If laws are robust enough and enforcement agencies are well-resourced, states should avoid implementing right to privacy action legislation.

Published

on

Jessica Rich speaking at a 2015 AdExchanger event while serving as director of the Bureau of Consumer Protection at the FTC. Photo from AdExchanger.

WASHINGTON, January 31, 2022 – Experts gathered virtually on Data Privacy Day on Thursday to revisit strategies to best hold companies accountable for the information they collect on their users.

Much of the conversations that took place on Thursday centered on the private right of action – whereby private citizens can legally pursue companies in lieu of government action. Though some experts view the practice favorably, most speakers were hesitant to support it.

“[Private right of action] has historically been used as a tool to harass businesses and create opportunities for frivolous claims,” ACT state policy associate Caleb Williamson said during a panel with the Information Technology Innovation Foundation. ACT is a trade organization that represents thousands of small tech companies and app makers.

Carl Holshouser, TechNet vice president for operations and strategic initiatives, pointed out that though the spirit of enabling private right to action may be to target big tech companies, small businesses are often caught in the crossfire and are the ones that get left paying the price. TechNet is a network of technology executives with the goal of promoting growth and innovation in the tech sector.

He acknowledged that while there can be benefits to right to action laws, they have resulted in more harm than good. “We all agree that where there is malfeasance and bad actors and consumers are harmed, there needs to be a mechanism with which to deal with that,” Holshouser said.

“But a wide private right of action leads to something that we have seen with the California privacy law. Since [2020], when it was enacted, there have been nearly 200 lawsuits that have been brought against companies who do business in California digitally but are looking at somewhere else that are mostly small businesses,” Holshouser added.

“Now, imagine if you’re a smaller startup that is in Kansas and your website reaches California. Here comes a lawyer that is suing you and says there is malfeasance, and you need to be sued and there has to be a settlement,” Holshouser continued. “This is a chilling effect on innovation and on small businesses that shows you why private right of action is too far.”

Private right of action alternatives

During an R Street event on Thursday, Jessica Rich, former Federal Trade Commission director of the Bureau of Consumer Protection, enumerated a list of items that should be employed as an alternative to right of action laws.

“If a law is strong enough in its provisions – in terms of protecting consumers plus the FTC is given adequate enforcement authority and resources plus the state and [attorneys general] can enforce that [law] – maybe you are making it less necessary to have a private right of action,” Rich said.

“Another solution that I am seeing in some legislation is that in addition to state agencies being able to enforce the law, other agencies in the state with jurisdiction over privacy,” Rich continued. “[They] could enforce the law, which could include more local agencies, and as long as they’re enforcing those same laws and the same standards, there could be that could even cover the field even more without me for a private right of action.”

Reporter Ben Kahn is a graduate of University of Baltimore and the National Journalism Center. His work has appeared in Washington Jewish Week and The Center Square, among other publications. He he covered almost every beat at Broadband Breakfast.

Broadband Mapping & Data

Robocalls, Rip and Replace, Pole Attachments: More Notes From the FCC Oversight Hearing

Commissioners and House lawmakers discussed key topics at a contentious hearing.

Published

on

Screenshot of commissioners at the hearing Thursday.

WASHINGTON, December 1, 2023 – All five Federal Communications Commissioners took part in a lengthy and at times contentious House oversight hearing on Thursday.

Commissioners urged Congress to restore the FCC’s authority to action spectrum, which expired in March and left the nation’s airwaves in limbo, and to fund the Affordable Connectivity Program, the low-income internet subsidy set to dry up in April of next year. 

GOP lawmakers FCC Republicans also took the chance to slam efforts by the commission’s Democratic majority.

The discussion touched on other issues including robocall prevention, rip and replace funding, and pole attachments.

Robocalls

The commission has been taking action on preventing robocalls this year, kicking off an inquiry into using artificial intelligence to detect fraud, blocking call traffic from 20 providers for lax enforcement policies and issuing hundreds of millions in fines. In August the commission also expanded the STIR/SHAKEN regime – a set of measures to confirm caller identities – to all providers who handle call traffic.

FCC Chairwoman Jessica Rosenworcel asked multiple times for three Congressional actions she said would help the commission crack down on scam calls: a new definition for “autodialer,” the ability to collect fines, and access to Bank Secrecy Act information.

The Supreme Court limited the definition of autodialers in 2021 to devices that store or produce phone numbers with random or sequential number generators. That leaves the scope of the Telephone Consumer Protection Act, which guides the FCC’s authority, “stuck in the nineties,” according to Rosenworcel.

“A lot of scam artists are using technologies no longer covered” by the act, she said. “We can’t go after them.”

On collecting robocall fines, that authority currently rests with the Department of Justice, and Rosenworcel is not the first to tell Congress the agency’s enforcement has been lax. Industry groups at an October Senate hearing cited slow DOJ action as a major reason FCC fines on the issue often go uncollected.

The Bank Secrecy Act requires financial institutions to keep records on certain transactions to help law enforcement agencies track money laundering and other criminal activity. The FCC cannot access information governed by the act, which Rosenworcel said would help the commission go after repeat scammers.

“These scam artists set up one company, we shut them down, they go and set another one up,” she said.

Rip and replace

Commissioners urged Congress to fund the rip and replace program. Congress allocated $1.9 billion to reimburse broadband companies for replacing network equipment from Chinese companies deemed to be national security threats, mainly Huawei and ZTE.

The FCC was tasked with overseeing the program and found in 2022 that another $3 billion would be needed to get the work done. The Biden administration joined a chorus of lawmakers and broadband companies in calling for Congress to fill the gap, but legislation on the issue has yet to be passed.

“We’re providing 40 cents on the dollar to a lot of small and rural carriers,” said Rosenworcel. “They need more funds to get the job done.”

The commission has been granting extensions to providers unable to get the work done on time. In addition to supply chain issues, some small providers cite a lack of funding as the reason they’re unable to replace insecure equipment.

Pole attachments

Commissioners expressed a willingness to shift some of the burden of utility pole replacements off of broadband providers as they attach new equipment.

“If a pole is getting replaced,” Commissioner Brendan Carr said, “there’s probably a role for the FCC to say that the pole owner should bear somewhere north of the cost of $0.”

The commission has authority in 26 states over most pole attachment deals between utility pole owners and telecommunications companies looking to expand their networks. The issue of who pays for poles that need to be replaced to accommodate more communications equipment is contentious, with telecoms arguing utilities force them to pay for replacing already junk poles. 

After spending years sifting through thousands of comments, commissioners have apparently been persuaded. Rules up for a vote at the commission’s December meeting would limit the scenarios in which utilities could pass full replacement costs on to attachers.

Broadband funding map

Rosenworcel repeatedly asked lawmakers to work with the commission on ensuring its broadband funding map is kept up to date.

The FCC launched its funding map in May to keep track of the myriad federal broadband subsidy efforts and avoid funding the same areas multiple times. The Department of Agriculture, the FCC, and the Treasury Department each oversee separate broadband funding programs, in addition to the Commerce Department’s upcoming $42.5 billion broadband expansion effort.

The commission has signed memoranda of understanding with those agencies on providing data for the funding map, but Rosenworcel asked the subcommittee for help ensuring the agencies follow through and respond to FCC requests for their funding data. 

“If you could help us make sure those other agencies respond to us with data, you’ll see where there are problems, duplication, areas we haven’t reached,” she said.

Continue Reading

Cybersecurity

Cybersecurity Requirements in BEAD Could Shape Internet Security Regulation More Widely

The Broadband Equity, Access and Deployment program requires ISPs and states to submit comprehensive cybersecurity plans.

Published

on

WASHINGTON, November 2, 2023 – How states implement cybersecurity rules in the $42.5 billion Broadband Equity, Access and Deployment program could shape internet security regulations more widely, experts said during a virtual panel Wednesday.

The BEAD program, which will provide federal grants to states to disperse for broadband projects, requires providers to submit comprehensive cybersecurity plans based on standards from the National Institute of Standards and Technology. Panelists said flexibility in the plans allows customization but also establishes baseline expectations as critical infrastructure relies more on connected technology.

“I think the way that states and entities interpret these BEAD cybersecurity and supply chain requirements is really going to have a ripple effect across the whole community,” said Savannah Schaefer, an attorney of Wilkinson Barker Knauer, who advises clients on cybersecurity.

Federal Communications Commission rules are beginning to include similar mandates, meaning how states implement BEAD’s requirements could influence cybersecurity regulations more broadly, Schaefer said.

Melissa Newman, vice president of government Affairs at the Telecommunications Industry Association, said BEAD’s cybersecurity stipulations cite lengthy federal guidance documents providers must wade through. Her trade group developed a checklist to help companies understand the rules.

“You cannot be confident in the security of your networks and products without consideration of both cyber and supply chain security,” said Newman, TIA’s vice president of government affairs.

Supply chain management, knowing who provides equipment and software, is critical because cybersecurity threats can be embedded throughout a product’s lifecycle, she said.

Evan Rice, senior vice president of Guide Star, a division of CCI Systems, said providers should start by documenting current cyber practices, identifying gaps and making plans to address them. Cybersecurity must be incorporated holistically, from network construction to long-term operation, he said.

“Everyone understands that piece. The cybersecurity is the same. Once you build it, you have to operate it,” said Rice. Schaefer encouraged viewing BEAD as part of an ongoing process of shaping cybersecurity requirements.

Our Broadband Breakfast Live Online events take place on Wednesday at 12 Noon ET. Watch the event on Broadband Breakfast, or REGISTER HERE to join the conversation.

Wednesday, November 1, 2023 – Cybersecurity and BEAD

To qualify for funding under the Broadband Equity, Access and Deployment program, network operators must submit a comprehensive cybersecurity strategy in line with the National Institute of Standards and Technology’s cybersecurity framework. What impacts do these requirements have on broadband deployers, and what steps can they take to ensure compliance? How can operators strike the right balance between expanding their networks and safeguarding them against cyber threats?

Panelists

  • Evan Rice, Senior Vice President, Guide Star
  • Savannah Schaefer, Wilkinson Barker Knauer LLP
  • Melissa Newman, Vice President of Government Affairs, Telecommunications Industry Association
  • Drew Clark (moderator), Editor and Publisher, Broadband Breakfast

Evan Rice is an experienced IT executive with a focus on cyber security and operational excellence. Evan currently serves as the Senior Vice President of Guide Star, a division of CCI Systems. Evan has been with CCI Systems since 2012, starting as a Data Services Professional then moving to the Vice President of Information Technology role prior to his current position at Guide Star.

As an Associate at Wilkinson Barker Knauer LLP, Savannah Schaefer advises clients on a range of issues pertaining to cybersecurity, supply chain risk management, and emerging technology. Prior to joining the firm, Savannah represented companies in the information and communications technology sector at two trade associations where she led development and advocacy of the associations’ cybersecurity and supply chain legal and policy positions. She has also served in leadership roles in the IT and Communications Sector Coordinating Councils and on the Department of Homeland Security’s ICT Supply Chain Risk Management Task Force.

Melissa Newman has over 25 years’ experience in government affairs for the telecommunications sector.  Prior to Melissa joining TIA as Vice President of Government Affairs, she worked at Transit Wireless heading the Legal and External Affairs departments; Wilkinson Barker Knauer, a premier telecommunications law firm in Washington, DC; CenturyLink (now Lumen) as Vice President, Federal Policy and Regulatory Affairs; and as Deputy Division Chief of the Policy Division in the Common Carrier Bureau of the FCC.

Breakfast Media LLC CEO Drew Clark has led the Broadband Breakfast community since 2008. An early proponent of better broadband, better lives, he initially founded the Broadband Census crowdsourcing campaign for broadband data. As Editor and Publisher, Clark presides over the leading media company advocating for higher-capacity internet everywhere through topical, timely and intelligent coverage. Clark also served as head of the Partnership for a Connected Illinois, a state broadband initiative.

WATCH HERE, or on YouTubeTwitter and Facebook.

As with all Broadband Breakfast Live Online events, the FREE webcasts will take place at 12 Noon ET on Wednesday.

SUBSCRIBE to the Broadband Breakfast YouTube channel. That way, you will be notified when events go live. Watch on YouTubeTwitter and Facebook.

See a complete list of upcoming and past Broadband Breakfast Live Online events.

Continue Reading

Cybersecurity

White Houses Asks Congress to Fill Rip and Replace Funding Gap

The $3 billion shortfall was first flagged by the FCC in July 2022.

Published

on

Photo of Joe Biden and Jill Biden in 2019 by Gage Skidmore.

WASHINGTON, October 26, 2023 – The Joe Biden administration is asking Congress to fill the $3 billion gap in the Federal Communications Commission’s rip and replace program, among other domestic needs.

The ask came Wednesday as part of a $55.9 billion request for domestic aid, including disaster relief and child care subsidies. Also in the White House’s request was $6 billion to continue the Affordable Connectivity Program, the monthly internet subsidy that’s set to dry up in April 2024 without additional funding.

In 2020, Congress required broadband providers to replace equipment from some Chinese companies, including Huawei and ZTE, citing concerns that it could be used for espionage. The effort was funded with $1.9 billion to reimburse companies for the cost of switching out gear.

But in July 2022 the FCC, which oversees the program, said broadband providers would need $4.98 billion to get the work done. There have since been repeated calls from lawmakers and industry to shore up the fund. Bills have been introduced in both the House and Senate to fill the $3 billion gap, but they have yet to be passed.

The deadline for approved companies to request reimbursement for rip and replace work passed on July 15. By default, companies have one year from the approval of that request to remove the Chinese equipment, but the commission has been granting deadline extensions as providers complain of funding troubles.

House Republicans managed to elect a speaker on the same day as the funding request, ending weeks of deadlock.

Continue Reading

Signup for Broadband Breakfast News



Broadband Breakfast Research Partner

Trending