Extract from Jim Gill’s article “New Privacy Laws, Data Minimization, and Challenges with Collaboration Data”
2023 may be the year of privacy laws. Five states have new laws that go into effect this year, which will likely usher in a new era of consumer privacy protections in the United States.
As stated in Reuters, “The new laws coming online in 2023 in California, Colorado, Connecticut, Utah, and Virginia reflect the influence of GDPR’s rights-based philosophical framework. These new laws represent a comprehensive approach to privacy protection, applying to businesses across numerous sectors, in addition to the sector-specific laws that remain in place.”
Data Minimization in the 2023 State Privacy Laws
These laws have many aspects to them, but one stands out, particularly for corporate legal and records management teams: data minimization requirements. Here’s a look at the different data requirements for each state with a law coming into effect this year.
Data Retention and Minimization Requirements
“DATA MINIMIZATION: Under the CPRA, any information collected must be “reasonably necessary and proportionate to either the purposes for which it was collected or another disclosed purpose” similar to the context under which it was collected. The individual’s data can’t be used in another way without notifying and receiving additional consent from the consumer.
