The Sectoral Approach – HIPAA, GLBA, COPPA

00:00

Hello, everyone, and welcome to lesson 1.3. Or we are going to discuss the sectoral approach, the data privacy legislation in the United States,

00:10

some learning goals and objectives for less than 1.3.

00:13

First, we're going to compare the comprehensive approach, and I'll get what that means in a moment versus the sectoral approach to data privacy legislation. Again, I'll get to that in a moment.

00:23

Objective number two. We will also discuss why the United States has historically relied on the sectoral approach.

00:30

Again. I'll explain what that means here in a second.

00:33

Then Number three.

00:35

What makes the CCP a so different and why the CCP differs from the sectoral approach

00:40

again,

00:42

giving away what we will discuss here in a moment. But these are our learning goals and objectives, so let's make sure we keep ourselves organized.

00:48

Let's compare and contrast the sectoral approach to data privacy versus the comprehensive approach.

00:54

Under the sectoral approach, Congress or some other national body will only regulate a specific industry, meaning that Onley businesses that fall underneath that industry are going to be subject to the privacy law that is about to get past.

01:07

There are other types of sectoral privacy laws.

01:10

In some cases, you might see a law where Onley, a specific kind of personal information, is regulated.

01:15

The big one.

01:18

Whenever you go to the doctor, you probably see the acronym PH. I, which stands for personal health information on Lee. A certain type of information in that instance is being regulated. On the other hand, maybe on Lee, a specific kind of individual is being protected.

01:32

The big one there tends to be Children

01:34

because Congress creates the law. In separate instances,

01:38

you're going to normally see different regulators to ensure that these privacy laws air followed.

01:42

Health regulators regulate privacy in the healthcare space.

01:46

Financial regulators regulate privacy in the financial space, etcetera.

01:49

There are some exceptions, and we'll get to that

01:55

That basically summarizes the sectoral approach and some of the laws and compliance obligations you've probably already encounter either at work or just in your personal life.

02:04

That's the left side of the screen.

02:06

Now let's take a look here for a moment at the comprehensive approach.

02:09

Under the comprehensive approach, all personal information of everyone is going to be regulated so long is that law applies to that region.

02:17

The big one there that I can think of is the GDP are

02:22

every data subject in the European Union is subject and enjoys the benefits of the GDP? Are

02:27

the industry the type of data the person who enjoys the benefits are all completely inconsequential, and it's going to be the same regulator that enforces that comprehensive privacy law.

02:38

Now,

02:38

with the sectoral approach summarized in the comprehensive approach summarized,

02:42

can you already begin to guess which category the CCP A falls into?

02:46

Let's make a quick mental note of that

02:50

for a quick moment. Let's explain why the sectoral approach historically had so much precedence in the United States.

02:55

One of the main reasons for that is industries, regrettably, had very strong lobbying groups.

03:01

Big tech is able to shape the laws in the ways that they want to, as do certain industries that have always been regulated.

03:08

Big farmer or the banking sector, the too big to fail. Banks are able to dictate the way the financial privacy laws, in many instances, will apply to them.

03:17

On the flip side, there are also industry groups or even nonprofits or think tanks that advocate that certain people have stronger protections.

03:27

The big one, of course, is the mantra. Protect the Children.

03:31

One of the reasons why Children have and enjoy stronger privacy laws and protections in the United States is because there were people historically who advocated on behalf of Children. Specifically,

03:44

let's take a quick moment to look at the sectoral laws that exist in this country that I will mention in future lessons and that interact with and sometimes smack right into the face of the CCP A itself.

03:55

Let's take a quick note of those laws.

03:59

The first one, which you're actually unlikely to encounter, is the Video Privacy Protection Act. That's actually a fun when I included because a gentleman by the name of Robert Bork was nominated for the Supreme Court

04:12

during his testimony before the Senate, he said, I don't believe there's a national right to privacy.

04:17

Someone got smart and went to his local blockbuster and requested the videos that he had previously rented and at the time, video cassettes.

04:27

When, of course, Robert Bork felt offended.

04:29

Privacy advocates were like,

04:30

Well, you never said that there was a natural right to privacy.

04:33

Funny enough, Congress actually passed a lot of fix that problem.

04:38

The main one that you probably have heard of whenever you go to the doctor's office is hip hop.

04:42

The Health Information Portability and Accountability Act is approaching 30 years in existence in this country and interacts frequently with the C c p A.

04:49

We'll make a note of that when that happens.

04:53

Coppa, as I mentioned a moment ago,

04:55

is the privacy law that regulates all things Children related

04:59

again, we will interact with Coppa as we talk about how the C C P. A. Applies to Children.

05:05

The G o B A. For any of you who work in the banking sector or your company might be a thin tank or something like that,

05:12

you do need to be aware of the G l B A privacy obligations and how they interact with the c c. P. A.

05:16

We'll make a note of that when it comes up,

05:19

and then the last one.

05:21

Just because the nature of technology has evolved.

05:25

In 2000 and eight,

05:26

Congress also passed a national sectoral law that regulates the use of genetic information.

05:32

Here's the punchline.

05:34

We're gonna get to this in future lessons

05:36

in a land of sectoral privacy laws. The C C P. A. Is the very first comprehensive privacy law in the United States.

05:44

It applies toe everyone in California, no matter what type of information is being processed

05:48

or collected in any form or fashion.

05:51

We'll get to all that in future lessons. But

05:54

that is why Sai Buri has created a specific course for the C C p A.

05:59

That's why the C C P. A. Is always on the news.

06:01

Keep an eye on that as you go through the lessons and encounter items at the workplace.

06:06

In summary, we talked about the differences between the comprehensive and sectoral approach and the big ticket privacy laws that you need to be aware of as we dive into these lessons here in the future. And of course, while the CCP a broke the norm with sectoral regulation by becoming the very first privacy law in the United States,