On September 4, 2018, the U.S. Department of Commerce's National Institute of Standards and Technology (NIST) announced the start of a collaborative project to develop a voluntary privacy framework to help organizations manage privacy related risk. The envisioned privacy framework will provide an enterprise-level approach to help organizations prioritize strategies for "flexible and effective privacy protection solutions so that individuals can enjoy the benefits of innovative technologies with greater confidence and trust." Parallel with this effort, the U.S. Department of Commerce's National Telecommunications and Information Administration is developing a domestic legal and policy approach for consumer privacy in coordination with the department's International Trade Administration.
NIST kicked off the privacy framework effort with a public workshop on October 16, 2018 in Austin, Texas held in conjunction with the International Association of Privacy Professionals' Privacy, Security, Risk 2018 conference. NIST will be holding a live webinar and Q&A session on the privacy framework on November 29, 2018.
NIST is a non-regulatory federal agency within the U.S. Department of Commerce whose mission is to "promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life." NIST is perhaps most well known for its 2014 Cybersecurity Framework, which has been widely adopted by private and public enterprises to manage against cybersecurity risk. Previous posts addressed NIST's prior efforts at issuing new maritime cybersecurity rules, focus on In ternet of Things technology, and update to its 2014 Cybersecurity Framework.
The adoption of a privacy framework by NIST will have a significant impact on business. It will also represent a welcome effort in light of the rapidly changing privacy frameworks facing industry, including the European Union's General Data Protection Regulation (GDPR) and California's new Privacy Law (which we analyze here) going into effect January 1, 2020.
Dentons is the world's first polycentric global law firm. A top 20 firm on the Acritas 2015 Global Elite Brand Index, the Firm is committed to challenging the status quo in delivering consistent and uncompromising quality and value in new and inventive ways. Driven to provide clients a competitive edge, and connected to the communities where its clients want to do business, Dentons knows that understanding local cultures is crucial to successfully completing a deal, resolving a dispute or solving a business challenge. Now the world's largest law firm, Dentons' global team builds agile, tailored solutions to meet the local, national and global needs of private and public clients of any size in more than 125 locations serving 50-plus countries. www.dentons.com.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.