California’s New Data Privacy Law Could Make State Companies More Competitive for Overseas Deals
Tami Abdollah is dot.LA's senior technology reporter. She was previously a national security and cybersecurity reporter for The Associated Press in Washington, D.C. She's been a reporter for the AP in Los Angeles, the Los Angeles Times and for L.A.'s NPR affiliate KPCC. Abdollah spent nearly a year in Iraq as a U.S. government contractor. A native Angeleno, she's traveled the world on $5 a day, taught trad climbing safety classes and is an avid mountaineer. Follow her on Twitter.
- The passage of California's Prop 24 will hit the data-broker industry hard and create a new state regulatory agency.
- The new law adds stringent legal requirements to how businesses collect and share consumer data.
- The new law is similar to Europe's GDPR law, which could give California businesses a leg up in dealing with European citizen's data.
The implications of California's new consumer data privacy law will ripple through the Golden State and potentially the nation, striking a large blow to the estimated $200-billion data broker industry and heralding a new industry that tracks down shared data and enforces its deletion, experts say.
Proposition 24 was overwhelmingly approved by voters Tuesday, just four months after state businesses were legally required to follow new consumer data privacy standards passed by the Legislature in 2018. The new California law, now the nation's strictest consumer data privacy law, adds even more stringent legal requirements to how businesses collect and share consumer data, ups penalties and potential liability, and sets up a new $10-million-per-year state agency to implement and enforce it.
More Compliance, and a New Industry to Track Down Data
"The companies are fatigued," said Jim Koenig, partner and co-chair for Fenwick & West LLP's privacy and cybersecurity practice. "Now there's another ballot initiative they have to prepare for as well [and] it's costing more money, more time and more staff focus."
Koenig said the new changes, especially in the nation's largest economy, create a "de facto baseline" on privacy for businesses nationwide because they "can't easily segregate out California customers from the rest of the customers in your program."
That means some companies may have to pick and choose what to comply with, depending on how much risk they are willing to take on, Koenig said.
In an interview with dot.LA Wednesday, San Francisco real-estate developer Alastair Mactaggart, who sponsored the new law, said he felt compelled because the Legislature could always be swayed by businesses that had already tried to gut massive portions of the 2018 law.
"Had this not passed, CCPA [the 2018 law] would have been unrecognizable in five years, for the worse," Mactaggart said. "Your and my expectations of what privacy [is] will change, the Legislature is in the right place for that. But there should also be something to counteract the trillions of dollars on the other side."
With that in mind, the new law includes a type of one-way ratchet that lets it be amended by a simple majority of the Legislature like any other law, as long as the amendments don't harm consumer privacy. Mactaggart's approach diverged from that of the sponsors of the newly passed gig worker measure Prop. 22. Part of that law requires a 7/8th majority in order to change its provisions.
"With all due respect, that's sort of saying I'm going to take my toys, go home, and my vision of the world is perfect," Mactaggart said. "We need something that moves with the times, and goes with the times."
Mactaggart said the new privacy agency's annual budget of $10 million should enable it to hire roughly 50 people, which is double the size of the state Attorney General's privacy enforcement staff and 25% more staff than what the Federal Trade Commission has for the entire country. The new law also removes a provision granting exclusive enforcement of the consumer privacy law to the state AG's office, enabling not just the new agency but also all 58 county district attorneys and major city attorneys to prosecute businesses in violation, Mactaggart said.
Because the law now holds companies responsible for ensuring that data it has shared with third parties or vendors is properly deleted upon request, experts say a new industry of companies will likely sprout up to help track down where data has gone. That's especially crucial with an estimated 5,000 data brokers worldwide, which can make tracking data down especially difficult.
These data-brokers are largely unregulated and sell people's personal information for billions of dollars a year. They include large companies like the credit bureaus — Experian, Equifax and TransUnion — and other smaller firms that aggregate personal information from both public and private sources to sell to other companies for advertising, employment, financial and research purposes.
"A dedicated privacy authority is a game changer," said Gabriela Zanfir-Fortuna, senior counsel for global privacy at The Future of Privacy Forum, a Washington, D.C.-based think tank. "This is something that exists in most of all of the other countries that have comprehensive privacy laws and this is something that currently doesn't exist in the U.S. [There's] the FTC but the FTC has a very broad mandate, in antitrust, consumer protection and then it's also privacy focused."
A Leg Up for California Businesses on International Data?
Experts say the new law is very, very close to the European privacy standard known as GDPR, or the General Data Protection Regulation touted by privacy experts as a gold standard. And that matters because it gives California a potential leg up in being deemed as adequate under EU law to deal with European citizen data flows.
"California businesses are going to enjoy a tremendous advantage over businesses in other states, because the European regulators are going to be more permissive to businesses in a state with a rights-based framework and an agency to enforce it," said Chris Hoofnagle, faculty director of the Berkeley Center for Law & Technology.
Mactaggart believes that this advantage will lead businesses to want to locate servers in California and, ultimately, spur other U.S. states to move toward their own privacy law adoptions. He said he's had initial conversations with European experts who told him California's new law should pass muster in allowing state companies to deal with European data.
Of course, the U.S. and European Union would first need to work out concerns over the U.S. national security apparatus that came to light after the Edward Snowden revelations. In July, the European Court of Justice invalidated a U.S.-EU agreement on trans-Altantic data flows over concerns about how the U.S national security apparatus deals with European citizen data, and what independent oversight and recourse citizens have. That has left U.S. and E.U. businesses in a sort of legal limbo.
ACLU Opposition And American Appetite For Privacy
Prop. 24 was notable in that many of the organizations that opposed it like the ACLU, did so because they wanted it to be even stronger.
Jacob Snow, a technology and civil liberties attorney for the ACLU of Northern California, said in a statement Wednesday the new law has "deep flaws" but "sends a clear message from California voters to the California legislature that they expect and demand action to protect their privacy and safeguard their fundamental privacy rights."
Snow said in a statement that it's time for the California Legislature to build on the new law to prohibit companies from charging more for privacy and impose substantial consequences on businesses that break its rules.
All the experts said it was likely that the new California law would put some fire under lawmakers in D.C. to take enacting a new privacy law more seriously.
On Tuesday, Michigan voters overwhelmingly approved — by nearly 89% — a state constitutional amendment that requires a search warrant to access any electronic communications, significantly upping the legal standard necessary to "probable cause." Meanwhile, Washington state lawmakers have again tabled discussion on a new Privacy Act for the third consecutive session, Zanfir-Fortuna said.
"There seems to be this appetite for more data privacy for Americans, especially when they are asked directly to vote on it," Zanfir-Fortuna said.
Many of the details of how California's Prop. 24 will work have yet to be determined. The new privacy agency will be stood up next year and the law won't go into effect until 2023. For many companies, the early rush to abide by the 2018 rule known as CCPA, was frustrated by continual changes as it was finalized.
"There will be a wait-and-see [period]. Companies are going to want to know where to land the plane before they take off on their compliance efforts," Koenig said.
Mactaggart had one message for weary businesses: "If you've taken steps to comply with CCPA it's not like you have to throw it all out, that work is all necessary to comply with CPRA. Now you just need to do more."
How does Prop. 24 impact your business? Are you worried? Excited? Hit me up. My DMs are open on Twitter @latams. You can also email me at tami(at)dot.la, or ask for my contact on Signal, for more secure and private communications.
- Two California Ballot Measures Could Have Outsized Impact On ... ›
- California Passes Nation's Most Stringent Consumer Data Privacy Law ›
Subscribe to our newsletter to catch every headline.
LA Tech Updates: Apple Podcast Vet Joins QCODE, Amazon Reportedly in Talks to Buy Wondery, Pharrell's New Black Ambition Incubator
Apple Podcast Veteran Joins Startup QCODE<img lazy-loadable="true" src="https://assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yNDUzNTQzMC9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTYzNDUzMzYyNH0.pOGV2lL0qOJQDiWw1T5i4SqsGfaL54hLWED6_5Mf1Ww/img.png?width=980" id="8d68d" class="rm-shortcode" data-rm-shortcode-id="f2a47797239f360473fead53338231d4" data-rm-shortcode-name="rebelmouse-image" alt="qcode" />www.sonos.com <p>QCODE, a Los Angeles podcast startup run by a former Creative Artists Agency talent agent, snagged longtime Apple podcast executive Steve Wilson. The 15-year veteran will become QCODE's chief strategy officer.</p> <p>QCODE, which <a href="https://dot.la/sonos-podcast-qcode-2648395035.html" target="_self">last month raised $6.4 million</a> in a Series A round led by Sono, is positioning itself as a funnel for Hollywood. </p> <p>Founded by Rob Herting, a former agent who had represented largely writers and filmmakers, the company has produced eight shows since 2019. Several have been auctioned for film and television, including "Dirty Diana." Amazon picked up the 6-part erotic drama for a TV series.</p>Wilson, who most recently ran marketing for Apple Podcasts, brings insights from the behemoth platform as the industry sees revenues soar. Advertising brought in near $1 billion this year, according to Interactive Advertising Bureau's podcast report prepared by PwC.
Amazon Reportedly in Exclusive Talks to Buy Wondery<img lazy-loadable="true" src="https://assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yNDc5NDU5OS9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTY0MjgyMDY3NX0.BHKSXjwra-gGsFEa7lXCCCMJXWV5cYxrZqhddj3-uds/img.jpg?width=980" id="d401d" class="rm-shortcode" data-rm-shortcode-id="c9c9eee1f9adc4c1d5edeca1af986a84" data-rm-shortcode-name="rebelmouse-image" alt="Hernan Lopez" />Hernan Lopez started Wondery with the belief that in-depth, narrative audio stories were poised to bloom.<p>Amazon is in "exclusive talks" to buy podcast company Wondery and subsume its 30 hit shows and over 8 million monthly listeners into its empire, the Wall Street Journal reported on Wednesday.</p> <p>The talks reportedly value Wondery above $300 million, in line with previous estimates from analysts, when Apple and Sony were said to have expressed interest.</p> <p>Wondery has produced dozens of original series including "Dr. Death" and "Business Wars," and has 19 shows currently in development to become television series. </p> <p>The company does not publicly disclose its financials, but chief executive Hernan Lopez has previously said the company is profitable. About three-quarters of Wondery's revenue comes from advertising, but Lopez has said the company's revenue share from content licensing is growing (Wondery owns the intellectual property for all of its originals). It also launched a subscription service, Wondery Plus, in June and is currently looking to expand its international footprint. </p> <p>Wondery, the West Hollywood-based company with the largest audience of any independent podcast producer, has been the subject of swirling rumors that several suitors are interested in acquiring it.</p> <p>After a pandemic-induced decline that struck much of the podcasting industry, Wondery's audience has surpassed its pre-COVID levels. Its Q3 revenue was about double year-on-year and its Q4 performance has been strong, Lopez previously told dot.LA. </p> <p>Podcasting overall now attracts over 100 million monthly listeners, according to Edison Research. The Interactive Advertising Bureau projects podcasting revenues to exceed $1 billion by 2021.</p> <p>That growth has spurred somewhat of an arms race, most evident in Spotify's spending spree, which also has helped that company diversify from its reliance on streaming. Amazon Music is one of Spotify's biggest competitors along with Apple Music, and <a href="https://www.wsj.com/articles/amazon-music-joins-podcasting-fray-11600261201?mod=article_inline" target="_blank" rel="noopener noreferrer">recently expanded into podcasts as well</a>. </p> <p>Acquiring Wondery would give Amazon more content to slide into Amazon Music, a scaled-down version of which is free for Amazon Prime subscribers. Combining that content with its Alexa smart speaker also could empower the company to capture more eyes and ears in the increasingly competitive attention economy. </p> <p>The talks are reportedly ongoing and no deal has been confirmed. </p>
- Sonos backs LA Podcast Studio QCODE with $6.4M Investment - dot ... ›
- Stem Music Rights Management Software, Raises $10 Million - dot.LA ›
LA Tech Updates: Fidelity Reportedly Seeks to Unload Bird Shares at a Loss; Warner Bros Streaming 2021 Releases; Plug-In South LA's Accelerator for 2021
Fidelity Reportedly Seeks To Unload Bird Shares at a Loss<img lazy-loadable="true" src="https://assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yMjkwMTI2OC9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTYyOTc0NTgyM30.2gHsdIxx6hnX0sV0Evq4Xdc-UsOWfaDn5sxhMhUWVoQ/img.jpg?width=980" id="e3f93" class="rm-shortcode" data-rm-shortcode-id="7034229cee2777d3a9f7e45313d88a5b" data-rm-shortcode-name="rebelmouse-image" />Escooter Unicorn Bird Seeks to Unload Santa Monica HQupload.wikimedia.org<p>Fidelity Investments is attempting to unload some of its shares in Bird Rides Inc. at a loss, <a href="https://www.businessinsider.com/bird-investor-fidelity-selling-stake-scooter-2020-12?r=US&IR=T" target="_blank">according to a report</a> published Wednesday night by Business Insider.</p><p>The move comes <a href="https://dot.la/bird-scooter-2648232688.html" target="_self">after dot.LA reported in October</a> that the mutual fund giant has marked down the value of its Bird investment by 17% since the beginning of the year.</p><hr><p>As a private company, Bird does not have to share its financials. Nor do the venture funds that hold most of its shares. However, Fidelity is required to account for shares at their fair market value so it provides a rare glimpse into the company's health.</p><p>But a source close to the matter said the sale should not be seen as any indication of Bird's financial performance. The shares represent less than ten percent of Fidelity's position and the intended sale is the result of a new portfolio manager taking over who does not want to invest in pre-IPO companies, the source said. </p><p>Neither Bird nor Fidelity would respond to dot.LA's request for comment.</p><p>Bird <a href="https://www.inc.com/magazine/201902/will-yakowicz/bird-electric-scooter-travis-vanderzanden-2018-company-of-the-year.html" target="_blank" rel="noopener noreferrer">became the fastest company in history</a> to reach unicorn status in 2018 and achieved a $2 billion valuation less than a year later. But as the pandemic hit, it abruptly laid off 406 employees <a href="https://dot.la/bird-layoffs-meeting-story-2645612465.html" target="_self">via a Zoom call</a> and was forced to remove its fleet from city streets just as it was gearing up for its normally lucrative summer season. </p><p>dot.LA reported in October the company <a href="https://pbs.twimg.com/media/EjstMVqVoAAWd7f.jpg" target="_blank" rel="noopener noreferrer">put its Santa Monica offices up for sublease</a> less than a year after completing a costly renovation.</p><p>Bird has maintained <a href="https://www.bird.co/blog/empty-streets-effect-pandemic-unexpected-lesson-life-after-cars/" target="_blank" rel="noopener noreferrer">the pandemic has been a positive</a> as riders prefer scooters over crowded buses and subways. <a href="https://www.bird.co/blog/scooter-riders-making-comeback-riding-longer-than-ever/" target="_blank" rel="noopener noreferrer">It says it is seeing riders take longer trips</a> than they did before the pandemic. </p><p>Last month, <a href="https://dot.la/bird-ipo-2648944903.html" target="_self">Bloomberg reported</a> Bird is looking to go public via a blank-check company. Bird said it had no plans to go public "this year," which did not exactly rule out a SPAC sometime in the near future. </p>
Plug-In South LA Opens New Accelerator Cohort for 2021<img lazy-loadable="true" src="https://dot.la/media-library/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yNDg2MzAxMS9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTY1MTg0MTM1Mn0.QPKaMFTusp_uKe5Td0K77QKhp7KXUY6_An5edQ588VM/image.jpg?width=980" id="460a2" class="rm-shortcode" data-rm-shortcode-id="c53839f0b8ac6658fd10bb2da6ea53f8" data-rm-shortcode-name="rebelmouse-image" /><p>Plug In South LA's Accelerator Program is returning in 2021. The outfit is looking for 10 Black and Latinx founders who have proof of product-market fit and traction. The organization, founded in 2015 by Derek Smith, aims to build a network for Black and Latinx founders in South Los Angeles.<br></p><p>Last year was the inaugural accelerator program funded by Verizon, Silicon Valley Bank and Nike. The 2019 cohort hosted five startups including Spooler, a tech-based clothing design startup that credits the program with helping to increase revenue two fold since March. During the program, the company received a contract to launch a Sesame Street active wear product line. </p><p>The last day to <a href="http://pluginsouthla.com/accelerator" target="_blank">apply for the program</a> is Dec. 9 </p>
- Bird Scooters Could Benefit From a Post-Covid World - dot.LA ›
- Bird Seeks to Unload Santa Monica HQ - dot.LA ›