Today we kick off 2025’s Data Privacy Week, which focuses attention on data governance practices, education, and action items to bolster data privacy and data protection for businesses and individuals, alike. As part of the designation, the National Cybersecurity Alliance has announced that this year’s Data Privacy Week theme is Take Control of Your Data.
An important part of taking control of your data, and the basis of current U.S. privacy law requirements, is the concept of data minimization and/or data use restrictions. These concepts are integral to any data governance or oversight program. Similarly, a company’s data specific obligations are driven, in part, by an organizations’ understanding of what types of data it has and how that data is used. If your organization does not currently have a data map that covers the entirety of data usage in your organization this is the year to ensure that clear data mapping is conducted and a data governance structure is in place.
Nineteen states have now passed comprehensive privacy legislation, and as the new legislative sessions in many states kicks off, we will certainly see additional states pass this type of legislation. In fact, Hawaii, Illinois, Massachusetts, New York, Ohio, Oklahoma, Pennsylvania, and South Carolina have now introduced privacy legislation. It is clear that 2025 could usher in enough privacy legislation to put us over 50% of states with current comprehensive privacy regulatory schemes. Will your organization be ready?

Leave a comment