November 30, 2009
Get the Flash Player to see this player.
The New Privacy Paradigm—moderated by Kelley Drye Partner Dana Rosenfeld
- Maneesha Mithal, Associate Director, Division of Privacy and Identity Protection, Bureau of Consumer Protection, Federal Trade Commission
- Lee Peeler, President, National Advertising Review Council
- Ari Schwartz, Vice President and Chief Operating Officer, Center for Democracy and Technology
- Maneesha Mithal, from the Federal Trade Commission (FTC), discussed how the FTC’s upcoming series of privacy roundtable discussions will impact the Commission’s examination of its privacy regulation framework. According to Ms. Mithal, the roundtable discussions are designed to address drawbacks in the current privacy regulatory framework; determine challenges the FTC will face moving forward, such as how the FTC can create clear privacy rules while maintaining flexibility to adopt to changing technology and marketing techniques; and what goals the FTC should adopt for privacy regulation and enforcement.
- Other topics included the Center for Democracy and Technology’s (CDT) view of the FTC’s roundtable discussions, including an overview of comments submitted by CDT regarding the event. Ari Schwartz, from CDT, urged the FTC to bring more enforcement actions using the unfairness standard to prevent misuse of consumers’ personal information and advocated the adoption of fair information practices, such as those used by the Department of Homeland Security.
- From the industry self-regulation perspective, Lee Peeler with the National Advertising Review Counsel, discussed the benefits of privacy self-regulation as a fast and flexible approach to create new privacy standards. Mr. Peeler also presented a model to regulate behavioral advertising and mechanisms that could monitor the industry for organizations that violate self-regulatory rules.
- Marc Groman, House Energy & Commerce Committee Staff
- Stephen L. Surdu, Vice President of Professional Services, MANDIANT
- Naomi Lefkowvitz, Attorney, Division of Privacy and Identity Protection, Bureau of Consumer Protection, Federal Trade Commission
- Legislative developments include Congressional data breach bills introduced in the House and Senate. Marc Groman, a staff member for the House Committee on Energy and Commerce, discussed the Committee’s efforts to enact federal data breach legislation and the requirements of this pending legislation, including a FTC mandate to promulgate data breach rules, coverage of both paper and electronic records, federal preemption standards, and civil penalty provisions available for both FTC and state enforcement actions.
- Stephen Surdu, from MANDIANT, an information security company, discussed new types of data security attacks that can leave organizations vulnerable to information breaches. Mr. Surdu warned that many new system attacks are more sophisticated, making them harder to recognize as security intrusions, such as new phishing scams that accurately spoof company logos, e-mail formats, and other information.
- FTC attorney for the Division of Privacy and Identity Protection, Naomi Lefkovitz, spoke about legislative and regulatory developments regarding identity theft, including the scope of the FTC’s Red Flags Rule. Ms. Lefkovitz provided information regarding the FTC’s approach to risk-based identity theft prevention plans and the rule’s effect on covered entities that use third party vendors to collect, use, or protect personal information.
- Mary Ellen Callahan, Chief Privacy Officer, Department of Homeland Security
- Edward Palmieri, Deputy Chief Privacy Officer, Sprint Nextel
- C.M. Tokë Vandervoort, Senior Counsel—Technology & Privacy, XO Communications
- From the government perspective, the Chief Privacy Officer for the Department of Homeland Security, Mary Ellen Callahan, discussed a variety of privacy law-related challenges facing the federal government, including the steps government agencies have taken to assess and to adapt to privacy issues created by the development and implementation of new technologies, such as web programs that use cookies or other web tracking devices. She also addressed concerns associated with the government’s use of social media, including public perceptions and expectations regarding privacy and the preservation of federal records.
- C.M. Tokë Vandervoort from XO Communications discussed benefits, drawbacks, and privacy issues associated with cloud computing. Cloud computing is beneficial to consumers and business because it minimizes costs of data storage, allows individuals and business to access new applications at a low cost, and can provide users with expert application support. But, privacy and information security problems can arise if consumer data is not properly protected or cloud computing organizations do not adequately communicate privacy and data security standards to consumers. Ms. Vandervoort provided possible remedies for privacy and security issues and explored what privacy and security issues could arise for cloud computing in the future.
- Edward Palmieri from Sprint Nextel addressed privacy issues related to emerging cell phone and location-based technology. These technologies offer valuable and convenient services for users; however, businesses should be careful to tailor privacy notices and notice/consent regimes to adequately warn consumers about different types of information used and collected by each program. Mr. Palmieri also stressed that consumer privacy education, simple and meaningful privacy disclosures, and comprehensive data security measures are necessary to protect consumers’ information and ensure consumer satisfaction with use of personal information by carriers.
Dana B. Rosenfeld
(202) 342-8588
drosenfeld@kelleydrye.com
Thomas W. Cohen
(202) 342-8451
tcohen@kelleydrye.com
John J. Heitmann
(202) 342-8544
jheitmann@kelleydrye.com
Jodie Z. Bernstein
(202) 342-8646
jbernstein@kelleydrye.com
Alysa Zeltzer Hutnik
(202) 342-8603
ahutnik@kelleydrye.com
