Out of all governmental agencies, state attorneys general are
likely to have the greatest impact on privacy enforcement in 2020
for the average business. Over the past few years, state AGs have
taken an increasingly active role in privacy and data security
matters, using their broad consumer protection authority to enforce
rapidly evolving state laws and investigate data security lapses.
Even more recently, state AGs have begun to step out of their
typical enforcement roles to pursue policy and legislative
initiatives.
Despite signs of momentum, Congress is unlikely to pass any
major new national cybersecurity legislation this election year.
Companies are thus likely looking at another year where privacy and
data security enforcement remains largely in the hands of state
AGs. Here are three trends to watch out for in 2020.