Gov. Newsom, Attorney General Bonta and CPPA File Letter Opposing Federal Privacy Preemption

SACRAMENTO — Gov. Gavin Newsom, Attorney General Rob Bonta, and the California Privacy Protection Agency or CPPA Feb. 28 sent a joint letter to Congress opposing preemption language in H.R. 8152, the American Data Privacy and Protection Act or ADPPA. The ADPPA, introduced in the last Congressional session, sought to replace California’s landmark law with weaker protections and could compromise the ability of the California Privacy Protection Agency or CPPA to fulfill its mandate to protect the privacy of Californians. California today calls on Congress to set the floor and not the ceiling in any federal privacy law, and to allow states to provide additional protections in response to changing technology and data privacy protection practices.

“National data privacy laws passed by Congress should strengthen, not weaken our existing laws here in California,” said Gov. Newsom. “As personal data is routinely bought and sold it is critical that consumers have the ability to consent to the sharing of this information, especially in an era where Roe v. Wade has been overturned and access to personal data can be used in legal proceedings. California has been on the leading edge when it comes to creating new digital technology, but we have also coupled these advances with stronger consumer protections. The rest of the nation should follow our lead.”

The joint letter was submitted to the House Energy & Commerce Committee in advance of the committee’s March 1 hearing, “Promoting U.S. Innovation and Individual Liberty through a National Standard for Data Privacy.” The committee is expected to reintroduce ADPPA in the new legislative session.

California continues to lead on data privacy, and to adopt laws in response to rapidly evolving technology, with the strongest and most groundbreaking data protections in the nation. Californians have robust protections and rights to manage and control the use of their data through the California Consumer Privacy Act or CCPA. As Congress considers adopting ADPPA, California urges changes to the proposed law as the ADPPA in its current form would undermine the CCPA and would hamper state efforts to keep up with and adapt laws to changing technology.

In the letter, Gov. Newsom, Attorney General Bonta, and CPPA urge Congress to make changes to the ADPPA proposal that:

• Allow states to respond to changes in technology and data collection practices to allow rigorous enforcement in those areas most affecting residents, and;
• Ensure that the ADPPA is passed without a preemption clause in order to protect critical data privacy protections in state law and preserve California’s authority to establish and enforce those protections.

Last fall, then-United States House Speaker Nancy Pelosi released comments outlining her concerns with ADPPA’s limits on state privacy protections. Governor Newsom, Attorney General Bonta, Assembly Speaker Rendon, and  members of the California Senate have also previously released letters raising concerns about ADPPA. On July 19, 2022, Attorney General Bonta led a multi-state coalition calling on Congress in its consideration of ADPPA to respect the role of states to enforce and provide for strong consumer privacy laws while advancing legislation enacting long-overdue privacy protections nationwide.

The California Privacy Protection Agency released a letter opposing H.R. 8152 last year, and in September, agency chairperson Jennifer Urban published an opinion piece in the San Francisco Chronicle highlighting how the ADPPA could remove existing protections from California consumers.  

The California Privacy Protection Agency’s mission is to protect the consumer privacy of Californians. Established in 2020, the Agency is governed by a five-member board that consists of experts in privacy, technology, and consumer rights. The agency has several responsibilities, such as promoting public awareness of consumers’ rights and businesses’ responsibilities under the CCPA; adopting regulations in furtherance of the CCPA; and beginning July 1, 2023, the agency is tasked with enforcing the CCPA through administrative enforcement actions. It will share CCPA enforcement authority with the Attorney General.

Details: Find a copy of the letter here.