Each time a brand new privateness rule comes on the scene, individuals instantly search for a workaround. Virginia’s ban on the sale of exact geolocation information can be no exception; its slim definition of a “sale” nearly dares individuals to attempt.
“There’s a enterprise individual proper now who doesn’t know my identify, however we’ll be finest mates by subsequent yr,” stated Ashley Taylor, a accomplice at Troutman Pepper Locke, who leads the agency’s regulatory and investigations apply.
Taylor is referring to the cat-and-mouse sport that may little doubt play out between state regulators and companies that depend on location information as firms take a look at how shut they will get to the road with out crossing it.
On July 1, by way of an modification to the Virginia Shopper Knowledge Safety Act, Virginia joined Connecticut, Maryland and Oregon to grow to be the fourth state to ban the sale of exact geolocation information. However the regulation solely applies when private information is disclosed for “financial consideration,” elevating apparent questions on information that’s folded into partnerships, included in bundles or disclosed by way of different non-cash preparations.
Taylor has seen firms attempt to get cute with definitions like that, each when he was a regulator and now in non-public apply.
Taylor was a deputy legal professional common in Virginia within the late ’90s and early 2000s, engaged on the Tobacco Grasp Settlement Settlement – the landmark deal that reshaped how states regulate and extract penalties from the cigarette business – and later main a number of the first huge multistate information breach circumstances, together with ChoicePoint.
Now, along with his dwelling state drawing a shiny line across the sale of exact location information, Taylor expects Virginia’s regulation to operate much less like a slim carve-out and extra like a brand new enviornment for information brokers, advert tech firms and folks seeking to take a look at the boundaries and discover some wiggle room.
AdExchanger caught up with Taylor for a couple of scorching takes.
On what counts as a knowledge sale: “I feel the preliminary place for lots of firms can be, ‘If it’s not a cash deal, it’s not a sale.’ However I’m anticipating a battle about what counts as worth past ‘cash.’ That’ll be the battleground, and the courts can be pressured to interpret the that means.”
On how Virginia is prone to implement its new geolocation information ban (at first): “You’re going to see a variety of civil investigative calls for that look extra like questions. Early on, the posture can be, ‘We’ve a brand new regulation on the books. Present us the way you’re complying.’ They’ll be in studying mode at first.”
On what firms can do to mitigate their regulatory threat in Virginia (and past): “I’d watch the AG’s workplace very carefully. Learn their official opinions and press releases and take a look at the language they use. That’s the place you’ll see their priorities emerge.
“I’d even be extremely delicate to the primary flurry of client complaints. And, if the AG reaches out to you, pay shut consideration to no matter they appear to be emphasizing. And keep in mind, while you’re approached, don’t instantly misconstrue contact as an allegation. Be clear and really responsive, as a result of it’s a possibility to teach earlier than issues flip adversarial.”
On why this isn’t only a Virginia factor: “As a result of most particular person states can’t afford to be totally staffed with consultants, we’ve seen sure states grow to be facilities of excellence for specific issues.
“For privateness, it’s Illinois, Massachusetts, California and Indiana. When a grievance comes right into a state AG’s workplace that doesn’t have a lot expertise in that space, the assistant AG actually picks up the telephone or sends an e-mail to a type of states and says, ‘Right here’s what I’m seeing and right here’s what I’m considering.’
“That’s the casual approach regulatory posture develops throughout the states. It occurs offline, however then it emerges in enforcement.”
On what firms ought to find out about how regulators function: “Regulators are animated by client complaints. State AGs are elected and really near the individuals. You go to the state truthful, you communicate on the Kiwanis membership, and actual individuals stroll as much as you and say, ‘Right here is my drawback, right here’s what occurred to me.’ That’s how coverage and priorities get shaped.
“Each case I’ve labored on in 20-plus years might be sourced again to a client grievance, typically one thing small that simply wasn’t dealt with correctly, and it’s what begins the ball rolling.”
Solutions have been evenly edited and condensed.
🙏 Thanks for studying! And since we’re on the subject of location information and monitoring, do you keep in mind the lady in Eire who put a GPS collar on her cat so she might see its actions all through the neighborhood?
As at all times, be happy to drop me a line at allison@adexchanger.com with any feedback or suggestions. 📌 Oh! And don’t overlook to avoid wasting the date for Programmatic IO New York, going down on September twenty eighth and twenty ninth on the New York Marriott Marquis. Snag your ticket, and I’ll see you there.
