Existing privacy laws create parameters into which a federal privacy mandate will likely fit. More generally, a proposed federal law will likely be more flexible than what we have seen with European-style legislation; and, it is unlikely that the mandate will be as narrowly tailored as that which we’ve seen in U.S. state-level legislations.
It is likely that a federal law would include a requirement for a comprehensive privacy program at the corporate level, rather than focusing solely on individuals’ interactions. In fact, a federal privacy mandate is likely to include the following components:
