IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Tech giants call for national data regulations that subvert California's GDPR-style laws

Senators say that any federal law would need to be more progressive than a state's approach

US Tech giants have said they would back a nation data regulation provided that it came into force before California's much tougher privacy legislation, in what's being seen as an attempt to avoid GDPR-style data protection laws.

During a hearing on Wednesday before the Senate Committee called 'Examining Safeguards for Consumer Data Privacy' members of Congress heard from six companies, including representatives from Google, Apple, Amazon and Twitter.

In his opening statement, the chairman of the committee, Senator John Thune said the question was no longer whether the US needed a federal law to protect consumer privacy, but rather what shape will that law take.

To replace current laws that are enforced at the state level, a countrywide privacy bill is being crafted, but senators are worried that tech companies will not like what is being put together, believing they will feel it's akin to the GDPR, which came into effect in March, or be similar to California's Consumer Privacy Act (CCPA) set to be implemented in 2020.

Instead, tech companies are working with lawmakers in an effort to avoid GDPR-style regulation that would place far greater restrictions on how and what data can be processed.

The representatives discussed three key points for a potential privacy legislation: a state law that pre-empts the California legislation; a promotion of privacy on their terms; and a block to the creation of a US version of the GDPR.

California Governor Jerry Brown signed the CCPA in June, which aims to give consumers more control over how companies collect and manage their personal information. The law, which is due to take effect in 2020, effectively replicates many of the provisions set out by GDPR inside the state of California, something which tech companies such as Alphabet Inc's Google and Amazon oppose as being too restrictive.

Referencing the GDPR, and also California's Law, AT&T senior VP of global public policy, Len Cali said: "What we're urging is a comprehensive federal law that looks at both these laws, learns from them, but does better than them."

At the hearing, Amazon VP Andrew DeVore said that California's law was hastily written and the law's definition of personal information went too far.

"The result is a law that is not only confusing and difficult to comply with, but that may actually undermine important privacy-protective practices," he said.

The drafting of tough data laws has played out simultaneously with high profile news stories such as the Cambridge Analytica scandal and the recent data breach to Equifax that affected around 145 million of its customers in the US, UK and Canada.

The tech companies are in favour of a federal law, provided it preempts California's 2020 legislation and doesn't emulate the GDPR. But the senators said that for a federal law to nullify a state law, it would have to be more progressive and robust than the state law which had already been voted for.

"I understand that from the standpoint of these companies, the holy grail is preemption," said Senator Brian Schatz. "We're not going to get 60 votes for anything and replace a progressive California Law, however flawed you may think it is, with a non-progressive federal law."

Matt Lock, director of sales engineers at Varonis said that the tech companies feared many other states would follow California's example and adopt tougher regulations.

"Tech leaders are afraid that consumer privacy laws similar to the GDPR will gain popularity among U.S. states and upend their business model, which often involves treating a person's data as a commodity to be bought and sold in exchange for a free service," he said.

"When an industry bands together to help steer the discussion in their favour it's because they fear strict laws down the road. California may be the first state to adopt GDPR-like laws, but it will not be the last."

Featured Resources

The state of Salesforce: Future of business

Three articles that look forward into the changing state of Salesforce and the future of business

Free Download

The mighty struggle to migrate SAP to the cloud may be over

A simplified and unified approach to delivering Enterprise Transformation in the cloud

Free Download

The business value of the transformative mainframe

Modernising on the mainframe

Free Download

The Total Economic Impact™ Of IBM FlashSystem

Cost savings and business benefits enabled by FlashSystem

Free Download

Most Popular

Why convenience is the biggest threat to your security

Why convenience is the biggest threat to your security

8 Aug 2022
How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

29 Jul 2022
Microsoft successfully tests emission-free hydrogen fuel cell system for data centres
data centres

Microsoft successfully tests emission-free hydrogen fuel cell system for data centres

29 Jul 2022