When the general counsel of any publicly-traded company is willing to consider private rights of action—i.e. individual lawsuits to enforce statutory privacy rights—as part of a federal privacy law, that’s news. It’s even bigger news when the company is in a data-driven business. So when Jerry Jones, the Chief Ethics and Legal Officer of the data systems and analytics powerhouse LiveRamp, wrote in a July 2020 op-ed that a federal privacy law “must acknowledge that [a] properly crafted private right-to-action is appropriate and necessary,” I characterized it as a “man-bites-dog” story.
Senate hearing opens the door to individual lawsuits in privacy legislation (brookings.edu)
