What does a meaningful U.S. federal privacy law look like?
As AI becomes more powerful, we need more powerful privacy protections. Policymakers and big businesses may claim to support the need for comprehensive privacy laws and regulations. But it’s just as important that these protections are strong, effective, and meaningful to people. Our vision for privacy is to have more and more jurisdictions around the world adopt and enforce (where they currently exist) these core principles into law:
-
People need basic transparency and notice
You should know how companies are using your data, and why.…including transparency over AI
That means you should also know if your data is being used to train AI systems or to power AI systems that are making decisions about you. In other words, companies that use AI like Microsoft and Open AI have to be up front in their user agreements and privacy statements about how data is being used by generative AI, and to what extent our data are retained and used to train the systems.
-
Companies should collect only the data they need
to manage and offer the product you’ve asked for, and no more.
…and have limits on third-party sharing — Companies should make it clear who they intend to share your data with, and under what circumstances. In other words, data should not be shared with “randos” without your affirmative consent.
-
Consent means no deceptive designs
Companies should not use pre-ticked boxes or tricky color schemes that make it hard to exercise your rights.
-
Our sensitive data should be treated with care
For example, biometric or health data should receive significant protection.
-
Consumers need basic data rights
People should have the right to access, delete, or correct their data.
-
The data broker industry must change
You (or someone you trust) should be able to delete your data from all data brokers at the press of a button.
-
Civil rights protections should extend online
If companies can’t discriminate at a lunch counter, they shouldn’t be able to discriminate online.
-
People are given easy ways to express privacy preferences
Once and for all through browser opt-out signals.
See how you can Take Action now