Difficult legislative path shaping up for 'must-pass' data privacy efforts in new Congress

Data privacy proposals are coming from business and consumer-rights groups, as well as from lawmakers, but it remains to be seen whether “must-pass” privacy legislation actually advances in the 116^th Congress and whether it sweeps in controversial elements such as breach notification.

Congressional interest has been stoked by consumer privacy and data security laws in California, New York and Massachusetts, and by the massive European Union General Data Protection Regulation – all of which affect U.S. citizens.

“It is the...