Maximizing the Effectiveness of Algorithmic and Privacy Risk Assessments

This report by the Electronic Privacy Information Center (EPIC) focuses on the effectiveness of algorithmic and privacy risk assessments in addressing the data privacy crisis in the U.S. The document outlines the unchecked spread of commercial surveillance and its adverse effects on consumer privacy and autonomy. It emphasizes the importance of robust risk assessments, particularly under the California Consumer Privacy Act (CCPA), which mandates such assessments when personal information is sold or used in automated decision-making systems. The report discusses the need for transparency and accountability mechanisms to mitigate privacy harms and presents components of an ideal risk assessment framework. It also highlights the ongoing rulemaking process in California and the challenges posed by industry arguments against regulation. The report aims to educate stakeholders on the significance of risk assessments as a best practice for businesses and advocates for consumer protection in the context of data processing and automated decision-making systems.