Legal
· 6 min read

Why the APRA Failed and What's Next for US Privacy?

The American Privacy Rights Act (APRA), a proposed federal law designed to establish a comprehensive framework for consumer data privacy in the United States has encountered a significant setback. The House Energy and Commerce Committee (E&C) abruptly cancelled a hearing scheduled for markup of the bill, citing opposition from both Republican and Democratic lawmakers.

Reasons for the failure of APRA

The APRA emerged from a lineage of failed legislative efforts to regulate data collection practices by commercial entities. Several factors contributed to the removal. Firstly, House Republican leaders reportedly vowed to block the bill regardless of its passage through the E&C Committee. This lack of Republican support significantly diminished the bill's chances of becoming law.

Secondly, the bill itself faced criticism from both sides of the aisle. Privacy and civil liberties groups expressed outrage over the removal of key provisions aimed at protecting vulnerable populations from data-driven discrimination and the harmful effects of algorithmic decision-making. The original bill granted consumers the right to opt-out of automated choices that significantly impacted their lives. However, this right was diluted by carve-outs for situations where compliance would be "prohibitively costly" or "technologically impracticable."

Similarly, provisions requiring companies to assess the fairness and bias inherent in their algorithms were eliminated. These provisions included language prohibiting data use that discriminates in areas like housing, employment, and healthcare. The final draft of the bill omitted crucial provisions that would have prohibited data-driven discrimination in areas like housing, employment, and healthcare.

Absence of Stakeholder engagement

Digital rights advocates decried the lack of transparency surrounding the revisions to the APRA. They argued that the changes were made without consulting relevant stakeholders and without considering the potential ramifications for data discrimination. The absence of a single, comprehensive response from the E&C Democrats to these concerns further underscored the disarray surrounding the bill.

House Democrats found themselves in a difficult position. While some lawmakers expressed concerns about the bill's potential to weaken existing state privacy laws, such as California's Consumer Privacy Act (CCPA), the pressure from both Republicans and civil rights advocates ultimately led to the bill's withdrawal from consideration.

Will there be a strong Data Privacy law in the US?

The future of the APRA remains uncertain as to when or if a comprehensive federal privacy law will be enacted. While E&C Chair Frank Pallone maintains a commitment to data privacy reform, the significant compromises made in the name of bipartisanship have alienated key constituencies. With the current political climate, the episode underscores the challenges of crafting a federal privacy law in the United States that balances the interests of consumers, businesses, and civil rights groups in the complex and evolving landscape of data privacy.

Suggestions for Improvement

  • To strengthen the APRA's civil rights protections, the bill could incorporate language mirroring existing fair housing and anti-discrimination laws.
  • The opt-out mechanism for algorithmic decision-making should be strengthened by establishing clearer standards for determining "prohibitive costs" and "technological limitations."
  • Any future legislation should mandate stringent impact assessments for algorithmic systems, ensuring transparency and accountability in the development and deployment of these technologies.
  • Meaningful stakeholder engagement, including consultations with civil rights organizations and consumer advocacy groups, is crucial throughout the legislative process.

The continued lack of a federal privacy law leaves American consumers with limited control over their personal data. Further legislative efforts will need to address the concerns raised by APRA's cancellation to effectively protect consumer privacy in the digital age.

Veda Dalvi
Hello, I'm Veda, the Legal Analyist with a knack for decoding the complex world of laws. A coffee aficionado and a lover of sunsets, oceans and the cosmos. Let's navigate the Legal Universe together!

Recent blogs

Contract Management
· 16 min read

How to choose the perfect Contract Management Software in 2024?

Read More
Technology
· 11 min read

Generative AI: From Contract Management to Creative Legal Solutions

Read More