The Center for Democracy and Technology (CDT) has provided feedback on the Initial Public Draft of the National Institute of Standards and Technology’s (NIST) Privacy Framework 1.1. This draft aims to update the existing NIST Privacy Framework 1.0, which is a voluntary guide designed to help organizations develop governance programs for handling personal data.
In its comments submitted on June 13, CDT highlighted the need for a strong baseline in privacy safeguards within these programs. The organization urged that the final version should also address and discourage harmful data practices observed in recent years.
According to CDT, "The final draft of the framework should communicate a strong baseline for safeguards incorporated in privacy programs," while also stressing that it should emphasize core privacy principles to foster additional protective measures.
CDT's comments further suggested that the updated framework include practical examples demonstrating how to effectively apply these guidelines. They advocate for higher standards in data governance programs to ensure public protection.
In light of the absence of a comprehensive federal consumer privacy law, CDT emphasizes the importance of industry voluntarily adopting robust data governance practices across states lacking specific privacy laws.