Skip to main content

Like many websites, BSA’s websites use cookies to ensure the efficient functioning of those websites and give our users the best possible experience. You can learn more about how we use cookies, and how you can change your browser's cookie settings, in our cookies statement. By continuing to use this site without changing your cookie settings, you consent to our use of cookies.


Data Privacy

BSA members are committed to protecting the privacy and security of consumers’ data. BSA promotes a user-centric approach to privacy that provides consumers with control over their personal data while ensuring industry can continue delivering value to consumers by providing innovative products and services.

BSA supports a single, clear set of strong federal standards for consumer data privacy in the United States and encourages interoperability around the world. Privacy systems must support the free flow of data across international borders so cloud computing and other valuable data services can flourish.

With these considerations in mind, BSA has developed a Privacy Framework as a guide for policymakers as they seek to draft privacy legislation in the United States and BSA Global Privacy Best Practices to encourage high-level standards around the world.

BSA also supports efforts to ensure that law enforcement authorities can access stored content, but only pursuant to a process that has sufficient privacy and due process protections.

BSA supports modernizing data policies so they are clear, effective, and predictable for individuals, businesses, and governments.


US: Models of State Privacy Legislation cover

US: 2023 Models of State Privacy Legislation

SEP 19, 2023 | US

Thirteen states have enacted comprehensive consumer privacy laws that create new rights for consumers, impose obligations on businesses that handle consumers’ personal data, and create new mechanisms to enforce those laws.

Controllers and Processors: A Longstanding Distinction in Privacy cover

Controllers and Processors: A Longstanding Distinction in Privacy

OCT 12, 2022 | GLOBAL

This document explains the history of the controller/processor distinction and demonstrates how widely that distinction has been adopted in global privacy laws.

 Federal Privacy Legislation cover

US: Comprehensive Federal Privacy Legislation Can Build on State Privacy Laws

SEP 21, 2022 | US

The United States needs a strong, comprehensive federal privacy law that ensures consumers’ personal data is used in ways they expect.

Transatlantic Data Flows & the EU-US Data Privacy Framework cover

Strengthening Transatlantic Data Flows

AUG 17, 2023 | US

Companies of all sizes and in all industries need to move data across the Atlantic to reach customers, manage supply chains, collaborate on research, and improve the services they provide to businesses and individuals. 

BSA Controller Processor position paper cover

The Global Standard: Distinguishing Between Controllers and Processors in Privacy Legislation

MAR 03, 2020 | GLOBAL

Comprehensive privacy legislation must create strong obligations for all companies that handle consumer data. These obligations will only be strong enough to protect consumer privacy and instill trust, though, if they reflect how a company interacts with consumer data.

BSA Privacy Framework

BSA Privacy Framework

SEP 11, 2018 | GLOBAL

BSA has developed a Privacy Framework as a guide for policymakers as they seek to draft privacy legislation.



Policy issues
Posted date
See all


SEP 12, 2023 | US

WASHINGTON – BSA | The Software Alliance applauds the enactment of consumer privacy legislation in Delaware, marking the 13th state with comprehensive consumer privacy protections. Matthew Lenz, Senior Director of State Advocacy at BSA | The Software Alliance, released the following statement on yesterday’s enactment of HB 154. Read more


The Economic Times, August 4, 2023. The Digital Personal Data Protection Bill (DPDPB), 2023, tabled in the Parliament on Thursday has detailed certain scenarios in which the protection to users under the provisions of the Act will not be applicable. Members of the Opposition and some technology policy experts have raised concerns as this gives wide ranging powers to the government. Read more

See all