The Absence of a Federal Breach Law
Calls for a uniform federal breach law go back to 2003, but no comprehensive federal data breach notification law has been enacted. The deadlock turns on preemption: businesses want fewer requirements plus preemption of stricter state laws, while privacy advocates want federal law matched to the strictest states.
How this supports CIPP/US study
Use this lesson to compare state-law scope, rights, exceptions and enforcement before choosing an answer. Continue with the CIPP/US practice exam.
National discussions began in 2003 when Senator Dianne Feinstein of California introduced the first federal breach notification bill. Many comprehensive federal bills have since been considered, but none has passed.
Privacy advocates want federal law set to the strictest state standards. Businesses want fewer requirements plus preemption of stricter state laws. This disagreement is why consensus has been hard to reach.
Key terms - quick answers
What is “Federal preemption”?
Sources and study method
This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.