Order SREA Reports
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
You have 5 more viewings!
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.
You have 4 more viewings!
You have 2 more viewings.
Unfortunately, you have no more viewings.
What is the Impact? This depends on whether the state is taking the “carrot or the stick” approach. Corporate liability is contingent upon the approach the state takes to address the issue. For example, California takes the stick approach requiring as of January 1, 2020, that consumers will be allowed to take legal action against a company that violates tenets of the law. The statute establishes a fairly broad definition of personal information that includes a whole raft of personal identifiers and inferences a company might be able to make about the consumer from that data. Ohio, on the other hand, takes the carrot approach by incentivizing companies that compile and transfer personal data to better protect that information by granting them safe harbor from litigation over breaches if certain conditions are met.
Why it Matters? For the recycling industry, personal data collection is most often mandated by laws designed to address materials theft and there is little evidence to indicate that policymakers’ new focus on data security has taken such mandates into account. Recyclers need to be closely following the policy discussions on data security in their states, particularly if the state and/or localities have mandatory electronic recordkeeping and/or reporting laws on the books. This is because despite the differing approaches seen in California and Ohio, for example, both state approaches indicate it is practically-certain that the personal information collected by recyclers under materials theft laws is going to be covered by almost any new data security law.
SPAN