USA: ULC approves uniform data protection act
The National Conference of Commissioners of Uniform State Laws ('ULC') announced, on 14 July 2021, that it had approved seven acts including the Uniform Personal Data Protection Act ('UPDPA') at its 2021 annual meeting. In particular, the UPDPA provides a uniform comprehensive data protection law for states to incorporate where none exists. Furthermore, the UPDPA includes data controller and processor obligations, data subject rights, data protection assessment requirements, and also establishes a private right of actions for people individuals. Notably, the UPDPA has faced criticism from consumer trade groups like the American Bankers Association for not including exclusions for financial institutions already subject to federal financial privacy legislation.