Pro-consumer group's privacy proposal excludes state breach-notice laws from pre-emption provisions

A new legislative proposal by consumer advocates would pre-empt some state privacy laws but would not overturn various states' existing data-breach breach notification requirements -- with the group framing the draft bill as a starting point for establishing federal governance of privacy and data security and saying there's agreement with industry that a federal law should contain data security requirements.

“People are definitely interested in data security requirements,” Michelle Richardson, director of the Center for Democracy and Technology's privacy and...