In a letter Tuesday to certain committee leaders in the U.S. Congress, California Attorney General Xavier Becerra proposed any federal data privacy legislation should “build on” the rights afforded to consumers in the California Consumer Privacy Act (CCPA). Federal data privacy law should also provide individuals with a private right of action and give state attorneys general parallel enforcement authority, the California AG maintained in his correspondence.
In fact, Congress should “look to states as sources of innovation and expertise” in data privacy, Becerra wrote. Rather than seeking to “undermine protections” like the CCPA, Congress should enact data privacy legislation “that sets a federal privacy-protection floor rather than a ceiling,” he suggested.
