State Privacy and Security Coalition Pans FCC Data-Breach Deadlines

The State Privacy and Security Coalition has asked the Federal Communications Commission to grant the petitions of Internet service providers, advertising agencies and others to reconsider its broadband privacy rules. It is preaching to the choir when it comes to the Republican FCC majority, which voted recently to stay part of the rules implementation and signaled they wanted to revamp the rules, or deed broadband privacy authority back to the Federal Trade Commission.

In a filing with the FCC, the coalition, which identifies itself as representing 25 leading communications, technology, retail and media companies and six trade associations (business leagues, chambers of commerce, real estate boards, according to ProPublica), took particular aim at the breach notification deadlines in the order, which it says are "confusingly out of kilter" with state and Federal Trade Commission deadlines—the FTC deadlines are for edge provider data collection, rather than ISPs, which the FCC privacy rules apply to. The coalition says none of the 47 state breach notification laws require the seven-day notice to law enforcement and 30-day consumer notification deadlines. It says most states have no consumer notice deadline and those that do have at least 45 days.