Key Points

1. 1) Congress needs to pass a comprehensive, national legal framework for data privacy and data security.
2. 2) An effective framework will need to address liability, preemption, private right of action, competition and innovation.