We joined the Electronic Privacy Information Center, Center for Democracy and Technology, and Public Knowledge in submitting reply comments to the Federal Communications Commission on a Notice of Proposed Rulemaking on Data Breach Reporting Requirements. The comments highlight the need for the FCC to incentivize the telecommunications industry to improve data security practices, create guidelines for network vulnerabilities, and better equip consumers to handle the fallout from breaches.

Submitted alongside a coalition of other organizations to the California Privacy Protection Agency for the first regulatory drafting comment period, our comments are generally positive—supporting the agency's crafting of data minimization and dark patterns rules. However, we do have some concerns regarding the regulations which would allow businesses to treat certain users of opt-out preference signals (e.g. Global Privacy Control which allows people to set their browser to communicate their privacy choice to the businesses).