US Approach to Privacy Might Focus on Risks, Not Notice and Consent, Says NTIA Chief

Comments on privacy to NTIA show “urgency, and a desire for American leadership” there, and that a “patchwork regulatory landscape” won’t work, Administrator David Redl said Tuesday at Mobile World Congress in Barcelona. “We want to build consensus around a fundamentally American approach to privacy, built on the same bedrock principles that so many nations share,” Redl said. “We’ve been talking with dozens of stakeholders to better understand what the problems are, what we can agree upon, and how we can move forward.” The model must ensure people trust technology that's part of their lives, he said. Privacy and prosperity are both possible, he said. “Focusing on risks and outcomes is preferred to notice-and-consent approaches,” Redl said. “Few consumers bother to read long legal notices -- and it’s our view that giant compliance departments aren’t going to lead to better privacy outcomes for consumers. We don’t want companies creating checkboxes and regulators critiquing web design.” Redl touched indirectly on who will be allowed to provide telecom network equipment in the U.S. (see 1902260019). The administration is considering rules against equipment by Chinese providers (see 1902220066). Booths at MWC show many options for 5G equipment, he said. “When network operators around the world are deciding which equipment they’re going to use, their first thought should be: Do I value my customers’ privacy and data security?” Redl said: “Our four largest wireless carriers have clearly answered affirmatively.”