Skip to Content

Privacy & Data

CDT Baseline Data Security One Pager

For more information on our efforts to create comprehensive federal privacy legislation, check out our Federal Privacy Legislation campaign.

Data security is one of the foundational Fair Information Practices which undergird privacy laws across the country, including existing federal health and financial privacy rules. Federal legislation must require entities that collect and use personal information to adopt reasonable policies, practices, and procedures to protect personal data. What is “reasonable” should be tailored to the activities of the company, the type and amount of data at issue, and the costs of implementing state of the art safeguards.

If you are reading this draft and want to talk to our Privacy & Data team for more info, please contact Michelle Richardson at [email protected].

Related Reading

Samir Jain Testimony for House Committee. White document on black background.

CDT VP of Policy Samir Jain Testimony Before U.S. House Energy & Commerce Committee on “Legislative Solutions to Protect Kids Online and Ensure Americans’ Data Privacy Rights”
The CDT logo. A light and dark grey "cdt" alongside "Center for Democracy & Technology" on a white background.

Deprecating third-party cookies: a small step towards a more private web
CDT brief, entitled "Unintended Consequences: Consumer Privacy Legislation and Schools." White and blue document on a grey background

Brief – Unintended Consequences: Consumer Privacy Legislation and Schools