CFPB Recommends Private Right of Action in State Privacy Laws
States should include a private right of action in their comprehensive privacy laws, the Consumer Financial Protection Bureau said Tuesday.
Sign up for a free preview to unlock the rest of this article
CFPB released a series of regulatory recommendations for state policymakers, including several on data privacy. In addition to the private right of action, the agency said, states should prohibit companies from selling or even sharing consumer data with third parties when the data unrelated to the services provided by the first party.
Other recommendations include: giving consumers the right to delete data; requiring companies to collect the minimum amount of data necessary to provide services; banning companies from sending minors targeted ads; and removing exemptions for data related to the Gramm-Leach-Bliley Act.