Comprehensive privacy legislation must create strong obligations for all companies that handle consumer data. These obligations will only be strong enough to protect consumer privacy and instill trust, though, if they reflect how a company interacts with consumer data.

This document focuses on what processors can (and cannot) do in helping controllers respond to consumer rights requests.

US copyright law is sufficiently flexible to adapt to AI, but we encourage further work on additional protections for artists to prevent the spread of unauthorized, AI-generated replicas of their name, image, likeness, or voice.