The "21st Century Privacy Coalition" might sound like the name of a group fighting for stronger privacy protections in the Internet age. But, in fact, it represents some of the nation's largest cable and phone companies, and is working to help those companies escape regulations on how they have to handle customer data. If the group gets its way, Congress would loosen regulations for how companies have to protect sensitive information -- such as what phone numbers you've sent text messages to, what you've watched on television, and potentially even what websites you've visited. The group is led by Mary Bono, a former Republican congresswoman from California, and Jon Leibowitz, a former Democratic chairman of the Federal Trade Commission. Funded by Comcast, AT&T, Verizon, Time Warner Cable, DirecTV, and industry trade associations, the coalition has spent nearly $2 million on lobbying, according to disclosure records. That money has gone to hire lobbyists from two firms: Mayer Brown and Ryan, MacKinnon, Vasapoli, and Berzok. It has essentially one goal: pass the Data Security and Breach Notification Act.
The bill, which cleared the House Energy and Commerce Committee in April, is intended to combat the kinds of massive hacks of personal information that have hit Target, Home Depot, and other companies in recent years. President Barack Obama even urged Congress to act on the issue during 2015's State of the Union address. The House legislation, authored by Rep Marsha Blackburn (R-TN) and Rep Peter Welch (D-VT), would require companies to have "reasonable" security and to notify their customers if their personal information is stolen. The bill generally just covers information that could be used for fraud, such as credit card or Social Security numbers. The 21st Century Privacy Coalition argues that it doesn't make sense for the telecommunications companies to have to comply with a whole separate regulatory regime. So, at its urging, lawmakers included language in the bill that would exempt companies from Federal Communications Commission regulations related to protecting personal information. Like retailers and other businesses, the telecom companies would only have to comply with the "reasonable" security standard enforced by the FTC.