Orrick partner Beth McGinn joins RegFi co-hosts Jerry Buckley and Sasha Leonhardt for our second episode focused on the proposed American Privacy Rights Act and its potential impact on the financial services industry. Beth sets the stage with an overview of the current data privacy regulatory landscape for financial services providers, including updates to the GLBA Safeguards Rule, reporting and disclosure requirements from the SEC and CISA, and state data privacy developments. Turning to the APRA, the group discusses how the FTC's expansive rulemaking authority might interact with existing federal regulatory regimes, whether state requirements could be exempt from federal preemption, and new executive responsibility and impact assessment requirements in the proposed legislation. The conversation closes with a quick round-up of early industry and policymaking reactions to the APRA and provisions that would benefit from clarification before the bill is finalized.

Links:

• RegFi Episode 30: A Closer Look at the American Privacy Rights Act
• The American Privacy Rights Act: 5 Things You Need to Know (Orrick Insight)
• Orrick Cyber, Privacy & Data Innovation
• Orrick Financial & Fintech Advisory
• RegFiPodcast.com