25 Mar
2026
25 Mar
'26
7:28 p.m.
I suggest reaching out to orgs that do policy work such as Oakland Privacy and Santa Clara
Citizens Privacy Coalition.
On data locality, the law can require data transferred out of state to be subject to
equivalent level of protection as the CCPA. Such contractual framework makes compliance
easier for smaller businesses without a global presence, and helps extend privacy
protection to smaller jurisdiction with out as mucj leverage. (However this does not
protect the data from being accessed by a foreign government)
Mar 25, 2026, 15:42 by sudo-discuss(a)sudoroom.org:
Hello SudoRoom!
I used to be a member when I lived in Oakland, but I ended up moving out to the
Sacramento area many years ago.
I have a discussion idea that I wanted to run by you fine folks...
We (as Californians) currently have the California Consumer Privacy Act in place, which
definitely helps support some consumer protections, but I don't think it requires data
to be stored and processed locally within the state.
Do you think Californians would benefit from additional data-locality requirements?
If so, do you think it would be worth attempting to push for GDPR style protections or a
similar objective as a CA ballot initiative?
My thoughts were that such an initiative could potentially add protections for consumers
while encouraging certain categories of tech work to be conducted locally within the
state.
Now, I'm not sure if I actually have the time or energy to follow up on this idea,
but I thought this group might be able to help me figure out if it was worth pursuing.
I miss seeing you folks very much, and I hope you're doing well out there!
<3
RyanJ