Federal Preemption and Private Right of Action Debates
The two most contested issues in any U.S. national privacy bill are preemption (would it override stricter state laws?) and a private right of action. Industry generally favors broad preemption and opposes a private right of action; privacy advocates take the opposite view.
Preemption occurs when a federal statute overrides an inconsistent state statute - for example, the federal CAN-SPAM Act preempts state laws that expressly regulate commercial email. In national privacy debates, industry generally favors broad preemption while privacy advocates have historically opposed it or sought to narrow it. State officials such as governors and attorneys general have publicly opposed broad preemption.
- Whether state attorneys general could still use state consumer protection law to bring privacy civil suits
- Whether state tort, contract, and property laws would be preempted
- Whether state medical, financial, and cybersecurity privacy laws would be preempted
- Whether provisions in the federal wiretap law and other federal privacy laws permitting stricter state laws would be maintained
The second flashpoint is the private right of action, which lets individuals sue directly rather than relying on a government official to fine the company. Again, industry typically opposes it and privacy advocates support it.
Memory hook: Industry= broad preemption + NO private suits. Advocates= narrow/no preemption + YES private suits. The two sides line up consistently on both issues.