5 Lessons the US Can Learn from European Privacy Efforts

Given that the General Data Protection Regulation (GDPR) has fallen short of expectations, policymakers in other countries have an opportunity to do better, rather than repeat Europe’s mistakes. Five lessons to learn:

1. Harmonize rules -- The US should pursue a single federal data protection law.
2. Avoid hurting internet users --  Not only were consumers inundated with online cookie notifications, new corporate privacy policies and requests to re-join email lists, but they were also cut off from some websites. 
3. Don't constrain innovation -- GDPR makes it too difficult for businesses to collect and use data, particularly by requiring organizations to specify how they will use data at the outset and minimizing what they collect.
4. Minimize compliance costs
5. Avoid regulatory overload

[Daniel Castro is the vice president of the Information Technology and Innovation Foundation (ITIF) and director of the Center for Data Innovation.]