►
Description
No description was provided for this meeting.
If this is YOUR meeting, an easy way to fix this is to add a description to your video, wherever mtngs.io found it (probably YouTube).
A
C
Thank
you,
mr
chairman.
I'm
pleased
today
to
have
with
me
judge
amanda
perkins
of
the
kentucky
department
of
workers
claims
I've
gotten
to
know,
judge
perkins
over
the
last
approximately
close
to
a
year
in
my
administrative
practice,
as
many
of
you
all
may
know,
senator
turner
and
I
probably
do
as
much
workers
compensation
along
with
president
stivers
as
anybody
in
the
general
assembly.
C
I
think
that
judge
perkins
and
what
I've
gotten
to
see
through
both
her
demeanor
and
her
decisions,
brings
a
very
balanced
and
well-rounded
perspective
to
her
job.
As
a
judge
at
the
department
of
workers
claims,
she
has
a
background
of
practicing
both
for
claimants
as
well
as
practicing
as
a
defense
attorney
for
the
university
of
kentucky,
our
state's
flagship
university.
C
C
A
A
C
Mr
chairman,
if
you
would
permit
me
I'd
like
to
maybe
have
judge
harvey
next,
if
that's.
C
C
Likewise,
I
think
that
any
practitioner
that
appears
before
judge
harvey
will
tell
you
that
his
knowledge
of
the
law
is
is
is
extremely
detailed
and
knowledgeable.
He
also
has
an
extremely
good
demeanor,
with
both
the
claimants
and
the
events
attorneys
and
really
tries
to
find
that
middle
ground
on
cases
you
know.
Sometimes
I
you
know
he
has
to
make
some
difficult
decisions.
C
In
fact,
I
think
he
even
had
to
make
a
difficult
decision
to
desisting
one
of
my
cases
lately,
but
that's,
but
you
know
what
I
would
say
about
him
is.
Is
he
has
the
courage
to
to
follow
the
law
in
the
in
the
manner
he
thinks
is
right.
Well,
necessarily,
his
fault
was
probably
something
that
the
general
assembly
did
a
few
years
back,
that
tied
his
hands,
but
he's
a
he's.
C
A
very
excellent
was
both
an
excellent
practitioner
by
reputation
and
has
also
been
an
excellent
judge,
and
I
think
the
department
of
workers
claims
and
the
commonwealth
can
be
very
proud
to
have
him
practicing
in
that
position,
and
I
would
urge
that
he
be
reconfirmed
in
his
appointment.
As
an
administrative
law.
Judge.
D
A
B
A
B
A
C
Mr
chairman,
I'm
honored
to
be
joined
by
judge
greg
allen,
who
not
only
is
a
a
wonderful
judge,
but
also
a
personal
friend.
I
think
he's
got
his
wife,
mary
gray,
so
many
of
us
are
familiar
with
joining
him
here
today.
I
think
also,
many
of
us
may
know
his
father,
jitter
allen,
who's
been
a
lobbyist
down
here
for
many
years.
C
Greg
is
kind
of
interesting.
I
got
to
know
him
by
the
fact
that,
probably
over
the
first
10
years
of
my
career,
he
was
on
the
other
side
of
30
to
40
percent
of
my
cases,
but
that
did
not
stop
us
really
from
becoming
great
friends.
His
his
work,
ethic
and
knowledge
of
the
law
is
as
broad
as
as
really
anybody
in
the
commonwealth
of
kentucky
when
it
comes
to
workers
compensation,
he
has
served
in
this
role
in
the
past
and
did
a
wonderful
job.
C
C
I
was
very
pleased
by
the
fact
that
he
was
reappointed
to
this
position
by
governor
beshear.
I
think
that
it's
really
one
of
the
better
appointments
that
I've
seen
him
make
in
his
capacity
as
governor
in
this
department,
and
I'm
sure,
senator
turner
can
add
a
little
bit
to
this
as
well,
because
we've
both
known
him
for
many
many
years
and
he
will
be
a
great
re-addition
to
the
department
of
workers
claims.
C
I
think
that
anybody
that
knows
him
will
tell
you
that
his
fairness
and
his
dedication
to
the
job
and
the
workers
compensation
community
is
really
unmatched.
So
it's
with
great
honor
that
I
would
recommend
my
friend
and
colleague,
and
our
judge
greg
allen
for
appointment
as
a
judge
at
the
department
of
workers
claims.
D
Thank
you,
mr
chairman.
I
joined
with
all
the
language
that
my
good
friend,
senator
wheeler,
said
speaking
to
greg
this
morning.
He
told
me
that
the
first
deposition
he
took
was
in
my
office
and
I
added
some
questions
for
him.
That's
the
kind
of
person
workers
comp
needs
to
do
that,
and
he
has
filled
all
those
roles.
D
D
As
a
judge,
I've
had
cases
many
cases
when
he
was
a
previous
judge
and
I'm
sure
that
he
will
just
continue
to
fill
that
role,
I'm
happy
for
both
him
and
his
wife
and
join
with
senator
wheeler
for
his
being
reappointed
and
really
supported
by
the
whole
bar
that
practices
workers
comp.
Thank
you,
mr
chairman.
Thank.
B
Thank
you.
Yes,
I've
had
the
privilege
of
not
only
knowing
greg
since
he
was
young,
but
his
grandfather.
My
father
were
friends
and
quite
a
legacy
in
the
sportsman's
world
in
east
kentucky
and,
of
course,
his
father.
Extraordinary
gentleman
has
contributed
a
lot
to
commonwealth,
but
he's
a
exceptional
lawyer,
he's
fair
he's,
equitable
he's
knowledgeable
and
we
couldn't
ask
for
a
better,
better
man
to
serve
the
position.
Thank
you.
A
E
I'm
voting
yes,
and
I
just
wanted
to
congratulate
all
of
our
nominees.
It's
unusual
that
you
get
out
of
here
without
me
asking
any
questions.
We've
had
such
great
reviews
that
I
don't
really
have
anything,
and
I
appreciate
the
detail-orientedness
and
really
the
focus
on
the
law,
because
I
feel
like
details
are
where
it
all
happens,
and
often
those
can
get
overlooked
and
that's
where
things
start
falling
apart,
but
very
appreciative
of
you
all.
Thank
you.
A
Vote
I
as
well
center
resolution
90,
passes,
favorably
and
we'll
entertain
a
motion
for
consent.
We
have
a
motion
from
senator
wilson.
We
have
a
second,
I
believe,
senator
mills,
all
those
in
favor,
of
adding
this
to
the
consent
calendar.
Please
sign
them
by
saying
aye
any
opposed
it
will
be
on
the
consent
calendar.
Congratulations!
F
A
A
And
so
far
for
the
audience
we
have
one
person
I
guess
signed
up
there
on
the
line
waiting
westerfield.
I
believe
what
I'd
like
to
do
with
our
time,
give
you
say,
10
minutes
or
so
hear
from
whoever's
online
hear
what
they
have
to
say
and
then
give
you.
The
final
word
as
mentioned.
This
is
information
only,
but
it's
a
it's
a
issue
and
a
bill
that
has
been
around.
A
G
I
appreciate
it.
Members
of
the
committee
you've
seen
this
slideshow
before
and
I've
abbreviated
it
for
your
benefit,
no
sense
in
going
back
through
all
that
again
simply
put
kentucky
needs
to
act
in
an
area
where
we
haven't
got
any
protections
in
place.
We
have
in
kentucky
law,
breach
notification,
statutes
for
the
private,
the
public
sectors,
but
that's
it.
We've
got
a
consumer
protection
statute
or
framework
in
statute,
but
it
doesn't
carry
or
cover
the
digital
space
at
all,
and
it
doesn't
do
anything
to
provide
all
of
us
as
kentuckians.
G
G
If
you've
been
on
the
internet
and
clicked
on
a
cookie
pop-up,
you
that's
the
gdpr
at
work
there
in
more
instances
than
not
that
was
in
2018.
in
2018.
Also
vermont
had
a
data
broker
opt-out
bill
in
2019,
connecticut,
acted
illinois
acted
with
some
limited
sort
of
small
bites
at
the
at
the
apple
in
2020.
California's
consumer
privacy
bill
goes
into
effect.
They
actually
passed
that
in
18
and
went
into
effect
and
20.
and
then
2021
virginia
and
colorado
both
enact
their
consumer
data
privacy
bills.
G
I
looked
at
all
three
of
virginia
colorado's
and
california's
and
actually
started
with
a
model
bill
from
the
state,
privacy
and
security
coalition
between
that
and
virginia
and
modeled
mine
after
that
bill.
It's
not
exactly
like
it.
There
are
some
differences,
but
it's
much
closer
to
the
virginia
bill
than
to
the
california
bill,
or
I
think
washington
state's
had
one
that's
failed
to
pass.
But
in
any
event,
the
intention
here
is
to
provide
consumers
with
a
basic
set
of
rights
that
are
set
forth
in
this
statute.
You
each
have
also
been
given
a
summary.
G
It
puts
control
of
personal
data
back
where
it
belongs,
and
that's
with
consumers
gives
consumers
the
power
to
delete
their
data.
It
gives
power
to
the
consumers
to
ask
for
a
copy
of
it
to
ask
to
identify
what
data
has
been
collected.
I
share
I've
shared
this
with
you
all
before,
but
this
was
three
years
ago
courier
journal's
homepage.
G
This
is
the
courier
couriers
home
home
page
back
in
2018.
When
I
took
the
screenshots,
you
didn't
agree
to
anything.
You
didn't
have
to
look
at
anything.
You
weren't
offered
anything,
but
every
one
of
those
things
in
that
purple
box
every
company.
There
is
running
code
on
that
website
and
by
just
going
there
you've
given
information,
they
may
have
tracked
what
kind
of
computer
you
have
not
much
harm
there,
but
it
gets
a
little
weird
when
they're
able
to
identify
the
website.
You
just
came
from
where
maybe
you
were
ordering
some
medicine?
G
Maybe
you
were
searching
for
something
that
you
don't
want
everybody
in
the
world
to
know
you
were
searching
for
or
shopping
for
something
you
don't
want
everybody
to
know.
You
were
shopping
for
or
it
tracks
where
you
click
next
there's
code
on
websites
that
identify
where
you
mouse
over
on
the
page.
G
I
don't
even
know
if
it's
anonymized
or
de-identified
still
has
your
name
or
your
ip
address
to
it
or
not.
No
idea,
I
shared
this
with
you
on.
This
is
an
attention
getter
and
that's
why
I
share
it,
but
it's
an
attention
getter
for
good
reason.
It's
jarring
someone
asked-
and
this
is
from
2018
in
the
dallas
morning.
News
and
I've
got
the
link
to
this.
G
Now
you
think
about
that
for
a
second,
what
they
had
to
know
to
make
this
map,
not
just
what
restaurants
are
open,
but
they
had
to
know
individual
devices
and
that
this
one
device
a
is
at
chick-fil-a
at
lunchtime
monday
through
saturday,
where
does
device
a
go
on
sunday
at
that
same
time
of
day,
company
live
mobile
insights
is
who
reported
this?
How
much
you
want
to
bet?
There's,
not
a
single
consumer
in
the
world
who
has
consented
to
sharing
this
information
with
that
company?
G
You
tell
me
where
there
was
a
disclosure
that
shared
by
the
way
when
you
offer
your
location
data,
we're
going
to
provide
you
our
service,
but
we're
also
going
to
share
it
with
this
company
called
live
mobile
insights.
So
we
can
make
this
cool
map
for
everybody
to
know
where
people
go
on
sundays,
for
lunch,
no
one
agreed
to
that
now.
Here's
the
important
thing!
G
It's
valuable
small
businesses
in
particular
want
to
target
customers.
They
want
to
build
their
base.
They
want
to
know
who's
shopping
who's.
Thinking
about
shopping
for
something
I
don't
have
a
problem
with
that.
I
don't
have
a
problem
with
that
at
all.
There's
a
lot
of
value
in
that
the
problem
is
that
consumers
don't
have
any
control
over
it
and
they're
not
kept
in
the
loop
on
it
and
that's
got
to
change.
It
has
to
change,
because
right
now,
kentucky
has
no
protection
on
the
books.
G
For
this
now
you're
going
to
hear
opposition
saying
that
this
goes
too
far
that
it
looks
too
much
like
california's
or
it's
too
much
like
the
eu's
gdpr
or
that
it
it's
got
horrendous
provisions.
They
may
not
use
the
word
horrendous,
but
they're
gonna
make
they're
gonna,
make
arguments
that
that's
very
frightening
and
and
that
the
one
of
the
worst
things
is
that
we're
having
to
do
a
piecemeal
thing.
We're
gonna
have
50
of
these
policies.
G
We
can't
wait
any
longer,
so
if
congress
ever
wants
to
come
back
in
and
do
something
super
that
more
that'd
be
wonderful,
but
until
that
happens,
kentucky
deserves
to
have
a
protection
in
place
and
while
virginia's
is
good,
I've
improved
upon
it
a
couple
of
things
that
have
changed.
How
much
time
do
I
have
left
in
the
first
10
minutes
here
any
none.
G
G
Been
working
hard
on
the
bill
and
I've
got
a
sub,
that's
in
the
in
the
works.
That's
continuing
to
make
changes
made
changes
last
night,
a
couple
of
key
provisions,
there's
a
threshold
for
when
this
kicks
in
how
many
customers
you've
got
to
have
in
your
system
as
a
business.
Before
it
even
applies
to
you.
The
threshold
I
included,
was
ten
thousand.
G
It's
going
to
go
up.
I
don't
know
to
what,
but
it'll
go
higher
than
that
virginia's
by
the
way
is
a
hundred
thousand,
which
is
way
the
heck
too
high.
That
excludes
a
lot
of
businesses
that
do
a
lot
of
data
movement,
so
it'll
go
higher
than
10,
but
I
don't
know
where
that
will
be
yet
or
if
you
generate
more
than
40
percent
of
your
revenue
from
the
data
that
you
collect.
G
Importantly,
we
carve
out
and
exempt
more
organizations
that
either
virginia
or
colorado,
I'm
not
trying
to
create
a
compliance
headache
by
doubling
up
on
the
scrutiny
that
you've
got
to
deal
with
if
you're
already
subject
to
hipaa.
This
doesn't
apply
if
you're
subject
to
high-tech
act
which
is
related
to
hipaa.
This
doesn't
apply
the
the
graham
leech
bliley
act,
which
is
in
the
financial
institution
industry
space.
G
If
that
applies,
this
doesn't
apply
and
I've
added
additional
language
in
my
sub
that
actually
excludes
affiliates
of
companies
that
are
subject
to
glb,
but
when
the
affiliates
are
I'm
going
to
loop
them
into
the
exemption,
so
we've
got
a
broad
number
of
exemptions
that
carve
people
out
of
the
bill,
because
I'm
not
trying
to
create
a
compliance
extra
level
of
headache
there.
If
you've
already
got
some
other
statute,
you've
got
to
comply
with
that
protects
data
or
anything
along
consumer
data.
Fine,
it
creates
the
rights
and
then
the
the
other
big
one.
G
At
the
end,
that
has
gotten
a
lot
of
attention
is
the
private
right
of
action,
and
I
want
to
finish
my
thoughts
on
this
before
chairman.
If
I
can,
before
you
have
the
other
speak,
so
you've
got
virginia
and
colorado
that
have
no
private
right
of
action,
and
only
enforcement
through
the
oag
you've
got
colorado.
That
has
a
limited
private
right
of
action,
but
only
for
data
breaches.
G
Everything
else
is
through
the
oag
and
the
preference,
particularly
from
the
business
community,
small
and
large
in
fairness,
and
I
get
it,
I
completely
understand
why
they
prefer
it.
They
don't
want
any
private
right
of
action.
They
want
only
enforcement
with
the
oag.
Well,
I
want
to
avoid
a
full-blown
private
of
action.
G
For
the
same
reasons,
I
don't
want
the
trial
bar
to
blow
it
up
and
file
a
bunch
of
nuisance
suits
and
all
that
sort
of
thing
I
don't
want
to
create,
with
respect
to
morgan
and
morgan,
an
opportunity
for
morgan
morgan
to
come
in
and
go
after
settlements
from
companies
left
and
right,
big
and
small.
I
don't
want
that.
That's
not
my
objective.
I
want
to
protect
consumers
in
the
data
that
they
haven't
given
power
over
it,
but
also
have
trouble
with
just
pure
oag
enforcement
when
it's
an
oag
enforcement
model.
H
G
It
is
equitable
relief
only
in
other
words,
you
can
ask
for
an
injunction,
that's
about
it
and
it's
limited
only
to
the
six
rights
set
forth
in
the
bill
and
after
a
conversation
with
the
state,
privacy
and
security
coalition
last
night
or
yesterday
afternoon,
which
I
I
found
helpful,
at
least
in
some
regards,
because
I've
got
an
idea
of
what
they,
what
their
concerns
are
but
frustrating,
because
they
weren't
willing
to
negotiate
a
darn
thing,
and
I
found
that
very
frustrating
and
infuriating,
but
even
without
their
asking,
I
agree
to
a
further
change
to
that
private
of
action.
G
They
brought
up.
If
you
have
oag
enforcement
and
they
cited,
I
think
california,
they
said
if
you
have
that
right
to
cure
with
the
oag,
and
this
form
letter
goes
out
when
someone
complains
that
70
percent
and
I
have
no
reason
to
question
our
numbers.
But
70
percent
of
those
complaints
are
sorted
out.
That's
70
of
the
people
who
are
businesses
that
get
a
letter
from
the
oag
saying.
We've
got
a
complaint
here.
You
need
to
correct
this
correct
it.
G
I'm
continuing
to
take
meetings
and
get
feedback
from
a
lot
of
folks.
Consumer
reports
sent
a
really
helpful
letter
just
about
an
hour
ago,
with
a
lot
of
praise
for
a
lot
of
the
bill
and
some
correct
or
some
edits
that
they've
suggested
that
actually
are
consistent
in
many
regards
with
what
the
state,
privacy
and
security
coalition
have
asked
for,
and
so
I'm
I'm
continuing
to
make
changes
to
the
bill
and
I'll
do
that.
But
I
appreciate
the
time
to
share
remarks
on
it.
This
morning,
chairman.
A
Thank
you,
sir
westerfield.
We
do
have
questions,
but
I
think
the
best
way
to
go
about
this
would
be
to
go
ahead.
Listen
to
our
witness,
then
we'll
open
it
up
for
questions
and
then
I'll
give
you
the
kind
of
closing
remarks
near
the
end.
So
I
believe
on
the
line.
Right
now,
we
have
andy.
Kingman
andy
is
with
the
state
privacy
and
security
coalition.
Andy.
Can
you
hear
us.
A
H
Okay,
fantastic
morning,
everybody,
my
name
is
andy
kingman.
I
represent
the
state
privacy
and
security
coalition
before
we
before
I
go
any
further.
I
just
want
to
thank
the
sponsor.
We
did
have
a
very
you
know,
civil
and
thoughtful
conversation.
Yesterday,
I
don't
think
we
agree
on
everything,
but
it's
always
you
know.
H
We
always
appreciate
when
folks
are
willing
to
give
us
their
their
time
and
attention,
and
you
know
I
think
he
ended
up
rescheduling
a
couple
meetings
to
continue
the
conversation
longer
than
we
had
allocated
so
really
appreciated
his
consideration
and
time
yesterday
and
his
thoughtfulness
in
in
trying
to
advance
privacy.
H
You
know
our
our
general
viewpoint
here
is
that
workable
privacy
frameworks
it's
important
to
provide
robust
and
useful
protections
for
consumers.
We
don't
want
consumers
to
be
overwhelmed.
We
don't
want
them
to
be
frustrated
or
or
to
have
their
intentions
frustrated,
and
you
know
we
do
feel
right
now
that,
as
drafted
sp
15
is
going
to
result
in
those
burdens
to
kentucky
consumers,
and
I
think
you
know
there
are.
There
are
sort
of
four
main
issues
that
we've
got
with
the
bill
right
now.
H
H
It's
going
to
require
very
lengthy
notices.
The
enforcement
is,
you
know,
as
the
senator
mentioned
does
contain
a
private
right
of
action
and
then,
lastly,
that
the
bill
is
contradictory
internally.
It
contradicts
itself
just
because
it
includes
elements
from
different
privacy
laws.
So
I'll
speak
to
each
of
those
briefly
and
then
happy
to
take
questions,
but
I
think
you
know
dealing
with
from
the
consumer
point
of
view.
H
Our
concern-
and
this
may
be
where
consumer
reports
is
coming
from
as
well
senator,
I'm
not
sure,
but
you
know
sb
15
sets
out
these
very
lengthy,
confusing
privacy
policy
requirements.
H
They
go
beyond
every
other
state
privacy
law,
even
california's
and
then
kind
of
pairs
it
with
a
novel
standard
of
the
least
sophisticated
consumer,
and
we
believe
that
the
proper
approach
would
be.
H
You
know
more
aligned
with
the
virginia
model,
which
requires
a
clear,
meaningful
privacy
notice
that
go
that
deals
with
categories
of
information
and
allows
a
much
more
concise
presentation,
which
makes
it
much
easier
for
the
consumer
to
understand
the
types
of
data
that's
being
collected,
the
types
of
third
parties
that
they
may
or
you
know
that
they
may
be
sharing
data
with,
etc,
etc.
H
H
Now
this
is
something
that
authorities
from
the
ftc
to
california,
to
virginia
to
colorado
have
all
recognized
again
is
overly
burdensome
from
consumers
and
those
cookie
banners
that
the
senator
mentioned
are
a
direct
result
of
that
opt-in
consent
framework,
and
you
know,
we
believe
that
the
proper
use
of
opt-in
consent
is
for
sensitive
information
and
that
you
know
consumers
generally
expect
routine
uses
of
data
such
as
payment
processing
or
shipping
logistics
to
be
handled
without
providing
opt-in
consent
at
every
step
of
the
way.
H
I
think
the
other
thing
that
we
worry
about
in
regards
to
the
small
business
community
is
that
you
know
there
are
fundamental
tensions
with
other
state
privacy
laws
here,
and
we
saw
in
california
where
the
attorney
general's
office
put
out
their
own
study
on
what
what
initial
compliance
costs
would
look
like,
and
the
initial
compliance
for
businesses
with
fewer
than
20
employees
is
50
000.
H
That's
just
a
number
that
many
small
businesses
can't
afford
to
pay
to.
You
know
stand
up
a
compliance
program
here
for
businesses
with
up
to
50
employees.
The
cost
was
estimated
to
be
a
hundred
thousand
dollars,
and
so
you
know
we
want
to
make
sure
that
the
implementation
is
as
effective
and
cost
effective
as
possible
and
again
that
you're
still
providing
basic
protections
for
kentucky
consumers
that
they
would
that
they
would
still
have
in
this
bill.
H
We're
not
we're
not
proposing
to
strike
any
of
those,
but
that
some
of
the
startup
costs
to
implement
this
bill
would
be
reduced.
H
I
think
the
la
the
the
enforcement
piece
you
know
it
sounds
like
senator
westerfield's
making
some
updates.
I
think
just
a
a
quick
note.
You
know
the
ag
does
have
authority
right
now
under
the
unfair
and
deceptive
trade
practices
act
that
that
kentucky
has
to
enforce
any
unfair
or
deceptive
trade
practices
right.
So
if
a
business
in
their
privacy
policy
says
that
they
are
not
sharing
data
with
particular
partners,
but
in
fact
they
are.
H
You
know,
as
written
sp
15
states
that
other
independent
causes
of
action
are
not
limited.
We
have
seen
in
other
states
in
washington
that
type
of
provision
ended
up
being
the
reason
that
the
privacy
bill
out
there
did
not
end
up
passing
and
we've
seen
in
california.
H
The
senator
was
correct
in
describing
that
there
is
a
limited
private
right
of
action
for
data
breaches
in
california.
We
still
have
seen
the
plaintiffs
bar
institute
over
200
complaints,
attempting
to
wrap
in
other
the
privacy
provisions
of
the
ccpa
and
find
some
sort
of
backdoor
private
right
of
action
that
would
allow
them
to
continue.
H
You
know
going
beyond
the
intent
of
the
law
and
so
for
us.
We
just
believe
that
the
office
of
the
attorney
general
is
the
proper
place
for
enforcement
to
reside.
The
right
to
cure
has
proven
to
be
a
very
effective
low
cost
low
resource
way
for
the
attorney
general's
office
to
respond
to
consumer
complaints
by
sending
a
letter-
and
it
doesn't
have
to
be
an
investigative
demand,
it
doesn't
have
to
be
an
official
investigation.
H
It's
simply
a
letter
saying
we
receive
this
complaint,
please
let
us
know
you
know,
please
provide
proof
that
you've
resolved
that
you've
looked
at
this
and
resolved
this,
and
the
senator.
You
know
said
that
correctly
that
you
know
70
percent
of
the
ccpa
compliance
has
come
through
those
type
of
low-level
ways
of
ensuring
that
businesses
who
aren't
in
compliance
come
into
compliance.
So
you
know
our
position
is
that
that's
the
proper
enforcement
method
and
the
last
piece
that
I
just
wanted
to
touch
on
briefly.
H
Was
this
sense
or
the
idea
of
the
internal
contradictions
in
the
bill?
And
again
you
know,
I
would
just
say
that
these
bills
are
have
been
very
carefully
drafted.
Both
virginia
and
colorado.
H
Gdpr
was
the
result
of
a
multi-year
process
and
they
all
kind
of
hang
together
as
their
own
puzzle,
where
all
the
pieces
are
designed
to
fit
together
in
particular
ways
here
this
build.
You
know
again,
it
sounds
like
there
are
some
changes
coming
happy
to
take
a
look
at
those,
but
this
bill.
You
know
that
we're
looking
at
right
now,
because
it
has
some
definitions
from
california.
H
You
know
elements
as
well,
you
know
it
just
doesn't
really
work
together,
and
so
I
think
those
are
the
majority
of
our
our
concern
sort
of
from
a
thematic
standpoint
here
so
happy
to
take
any
questions
and
thanks
very
much
for
your
time.
A
I
think
I'll
lead
us
off
and
really
to
I'll
address
it
to
you
senator
westerfield,
but
if
you're
not
sure,
perhaps
mr
kingman
knows
you
had
mentioned
in
section
two
subsection
one
and
then
it's
a
it
talks
about
the
ten
thousand-
and
I
know
you
said
you're
going
to
raise
that
and
I
had
a
constituent
very
concerned
about
that
number
saying
it
was
it's
pretty
easy
to
hit
10
000
in
a
calendar
year,
you
would
mention
virginia's,
100
000,
being
too
high
is
colorado
and
california
also
100,
or
do
they
have
a
different
threshold
andrew.
G
G
It's
not
easy
to
get
90
000
customers,
but
that's
a
big
company.
That's
a
big
processor
of
data,
I
think
10
000
is
I
mean,
ideally
I'm
not
going
to
hide
the
ball
from
you
all.
Ideally
there
wouldn't
be
a
threshold
at
all.
It'd
apply
to
everybody
that
collects
consumer
data.
A
Mr
kingman,
do
you
happen
to
know
if
colorado
and
california's
threshold
yeah
they're
they're,
all
a
hundred
thousand
hundred
thousand
okay,
thank
you
and
senator
westerfield.
When
you
talk
about
collection
of
data,
you
know
if
I
have
a
retail
store
and
you
come
I'm
just,
for
example,
I'm
selling
clothes
and
you
come
in,
and
I
have
a
credit
card
transaction
and
everything
I'm
going
to
I'm
going
to
hold
that
for
my
records.
A
G
So,
there's
not
a
time
limitation
on
that
and
that's
a
request.
That's
actually
been
given.
If
that's
what
you're
getting
at
specifically
there's
been
a
request,
and
I
forget
what
group
asked
for
it
or
what
individual
person
asked
for
it,
but
they
had
a
question
about
and
I'm
open
to
suggestion
if
this
is
responsive
at
all
to
what
you're
asking
for
chairman.
G
A
A
G
Essential
to
the
operation
of
the
business
there
are
things
that
you
can't
opt
out
of.
There
are
things
that
can't
be
deleted,
but
again
that
the
consumers
give
the
opportunity
to
to
ask
for
that.
Company
doesn't
even
have
to
agree
to
it.
There's
there's
even
an
appeal
process
built
into
the
bill.
A
G
A
I'll
go
there
because
I
know
other
members
have
questions
as
well,
so
I'll
jump
to
that
section
of
the
appeal
process.
If
anyone's
looking,
I
believe
it's
in
section
three
you
have,
I
believe
they
have
to
invoke
their
rights
30
days
and
virginia
and
colorado
are
already
45
and
I
know
you
have
may
extend
by
15..
I
guess
I
was
just
wondering
the
logic
instead
of
just
instead
of
having
30
plus
may
extend
by
15
what
why
not
just
have
45.
G
C
C
Tens
of
thousands
of
violations-
and
I
I
can't
imagine
the
a
you
know-
the
ag's
office-
may
well-
have
to
set
up
an
entire
department
to
to
to
to
deal
with
this
type
of
situation.
But
you
know
why
would
you
not
want
the
assistance
of
you
know
why
shouldn't
somebody
be
able
to
go
out,
especially
if
their
data
is
is
breached
and
they
suffer
a
financial
harm?
C
I
think
it's
wrong
to
not
allow
them
to
to
collect
on
that,
if
indeed
they
have
suffered
a
financial
penalty
as
a
result
of
violation
of
this
act.
G
G
Agree
with
you
can't
pass
it
with
that,
not
enough
not
enough
votes
to
pass
it
with
that.
I
mean
that
that's
just
the
unvarnished
truth
and-
and
I
think
I
mean
with
all
due
respect
to
the
many
many
lobbyists
who've
been
activated
on
this
bill-
I
I
think
that's
that's
a
line
in
the
sand
that
they
would
fight
against,
and
their
customers
and
clients
would
fight
against.
G
F
Thank
you,
mr
chairman,
and
senator
westfield.
Thank
you
for
this
bill.
I
think
it
sorely
needed
something
that
we
do
need.
My
question
is
in
the
curry
journal
page
that
you
showed
us
in
the
list
of
all
those
people
that
are
collecting
data.
Does
the
courier
journal
do
they
pay
the
courier
journal
to
be
on
their
site?
Collecting
this
data.
G
G
I
believe
I
don't
know
if
google
is
and
they're
the
ones
that
we
that
we
know
but
again
you've
got
these
others,
but
I
guarantee
you
I
don't
I
can't
say
I
have
firsthand
knowledge
of
the
nature
or
the
details
of
the
agreement,
but
the
courier
is
not
going
to
give
away
their
traffic
for
free
or
the
information
for
free
or
these
companies
won't
either
and
maybe
we're
sitting
here
senator
they
may
not
get
anything
specific
about
you
and
if,
if
they
don't,
then
I'm
not
nearly
as
worried
about
those,
but
we
don't
know
and
there's
no
way
to
find
this
out
and
how
many
of
you
have
ever
heard
of
ghostery.
G
Before
I
mentioned
it,
how
many
other
people
are
running
this
and
the
new
version
of
ios
and
ipad
os?
You
can
actually
see
a
privacy
report.
In
the
last
seven
days,
49
trackers
have
been
prevented
from
tracking
my
ip
address
from
the
websites
I
visit.
That
number
has
been
in
in
the
order
of
200
plus
for
me
on
occasion,
just
over
a
seven
day
span.
F
A
E
Thank
you,
mr
chairman,
so
I'm
looking
at
this
thing
that
you
we
heard
about
with
the
companies
and
the
10
000
and
100
000
in
compliance
costs,
and
I
was
going
to
ask
question
about
the
compliance
cost,
but
I
think
I
maybe
understand
it
and
I
want
to
get
clarification.
E
So
if
a
company
has
a
website,
let's
say
I
have
a
website
all
right,
so
I
have
a
website
and
my
goal
was
to
not
have
trackers
on
my
website
because
I
hate
this
stuff,
but
then
you
know
you
get
these
certain
deals
and
it's
like.
Oh,
we
can
add
to
messenger,
but
you
gotta
have
to
add
this
pixel.
Well,
if
I
had
this
pixel
now,
I've
got
to
put
one
of
these
little
disclaimer
deals
and
get
everyone
to
opt
in.
E
E
Well,
I'm
assuming
that
my
hosting,
since
I'm
not
self-hosting
here,
probably
has
some
kind
of
stuff
on
there
and
I
don't
even
know
what
it
is
and
I'm
the
person
that
owns
the
website
supposedly
so
this
10,
000
or
100
or
whatever
it
is
in
these
compliance
costs.
Is
that
really
a
compliance
cost
to
not.
G
It
would
be
the
company,
that's
gathering
that
customer
data
and
monetizing
it
in
some
way
gathering
that
data
and
that's
not
you
I
like
you-
I've
got
a
squarespace
website
and
I've
got
squarespace's
own
analytics
running
on
it,
but
I'm
not
collecting
that.
I'm
not
saving
that
this
doesn't
apply
to
me
and.
G
I
think
it
I
think
in
fairness
to
mr
kingman's
remarks.
I
think
it
is
an
increasing
impact
because
smaller
businesses
are
realizing
the
potential
of
collecting
that
data
to
build
and
learn
more
about
their
customers
or
to
grow
and
add
more
customers
to
it.
So
I
think
I
think,
he's
right
that
that
is
something
that's
becoming
more
attractive
to
smaller
businesses
if
on
their,
if
not
on
their
own
than
through
third
parties
that
want
to
sell
them.
G
Those
services
like
you
just
talked
about
so
I
think
that
is
something
that
smaller
businesses
are
doing
and
I
I
can
come
up
with
lots.
I
mean
again,
I've
told
you
I'd,
prefer
there'd,
be
no
threshold
at
all
that
just
applied
to
anybody,
that's
in
this
business
or
in
the
space
of
collecting
and
using
this
data,
but
that's
not
realistic,
and
I
can't
pass
that
I
think
100
000
is
too
high,
so
I'm
I'm
considering
anything
less
than
a
hundred
thousand.
A
Thank
you
and
senator
westerfield
and
mr
kingman,
and
going
to
that
hundred
thousand
I'd
be
curious.
If,
if
we
have
any
evidence
or
explanation
how
the
other
states
picked
that
number,
I.
G
Would
be,
I
don't
want
to
speak
for
mr
kingman.
I
think
it
was
a
negotiated
amount.
Okay,
the
coalition
worked
in
virginia.
I
know
that
they
I
they
may
have
had
some
role
in
colorado.
G
A
Mr
cayman,
do
you
if,
if
today
senator
westerfield,
was
proposing
a
committee
sub
to
adopt
the
colorado
virginia
bill?
Would
your
organization
be
silent
in
favor
or
against
it.
H
Yeah,
so
we
we
advocate
the
virginia
model.
We
think
that's
the
best.
So
if,
if
that's
where
the
committee
was
going,
we
wouldn't
we
wouldn't
object
to
that.
Would.
A
H
No,
no,
you
would
be.
You
would
be
a
pro
we
yeah,
I
don't
I
don't
know
yeah,
I
I
we
would
certainly
not
object
to.
It
would
not
oppose
it.
We
would
not
work
against
the
virginia
model
going
going
forward.
Would
it
be
possible
just
to
address
the
the
small
business
I
can
address
it?
Sort
of
in
the
context
of
the
hundred
thousand,
but
to
address.
H
Okay,
great
so
the
hundred
thousand
number
was
picked
because
california,
when
the
ccpa
was
passed,
that
was
the
number
there
100
000
consumers
was
sort
of
propagated
across
virginia
colorado
to
keep
it
uniform
so
that
everybody
had
had
the
same
sense
of
application
in
terms
of
small
business
compliance.
H
The
reason
that
the
compliance
costs
escalate
quickly
is
that
you
have
to
hire
privacy
counsel
to
draft
these
lengthy
privacy
notices,
and
they
have
to
be
done
in
a
very
careful
and
specific
way.
There's
it
architecture
to
be
able
to
provide
the
opt-out
requests,
whether
that's
for
targeted
advertising
to
profiling
or
the
sale
of
data.
There
need
to
needs
to
be
an
architecture
built
to
be
able
to
collate
access
requests
so
that
somebody
wants
to
access
their
data
that
they're,
given
their
data
back
in
a
meaningful
summary.
H
There
are
contractual
modifications
with
all
of
your
vendors
about
requiring
you
know,
negotiation
about
what
they
must
agree
to
to
to.
H
You
know
meet
the
requirements
in
the
particular
bill
about
how
they
treat
data
once
they're
in
receipt
of
it,
and
so
it
there
are
really
any
number
of
components
to
it
that
quickly
quickly
add
up
okay
and
that's
regardless
of
whether
it's
a
small
business
or
a
larger
business.
Yep.
A
And
we
will
certainly,
if
you
want
to
email
us,
we
can
distribute
any
other
written
concerns
or
comments
to
the
committee
and
senator
westerfield.
You
have
the
final
five
minutes,
sir.
G
Mr
chairman,
thank
you.
I
want
to
thank
mr
kingman
for
his
time
yesterday
again
and
kate
lucent
there
with
the
coalition,
and
I
expect
we'll
have
another
call
or
two
before
it's
all
said
and
done
as
I
as
I
continue
my
work
on
a
committee
substitute,
but
I
want
to
draw
your
attention
to
what
he
said
there
his
remarks
just
in
his
remarks
and
his
principle
remarks
earlier.
G
On
my
call
yesterday
for
an
hour
and
15
or
20
minutes
with
them
repeatedly
I
kept
bringing
up.
They
would
say
that
this
is
going
to
be
a
burden
on
business
that
they've
got
to
comply
with
this,
and
do
that
and
I
kept
saying,
but
that
assumes
they
continue
to
collect
the
data
that
they've
been
collecting,
unabashedly
and
unabated
for
years
and
years
something's
got
to
give.
G
G
G
There
was
a
time
when
the
businesses
that
existed
did
so
without
collecting
my
birth
date
and
what
my
interests
are
and
what
I
clicked
on
on
the
website.
Before
I
came
to
your
website
and
where
I
go
to
next,
it
all
assumes
that
they
can
continue
the
gravy
train
of
data
coming
to
them.
That
is
the
problem
that
I
have
with
the
objections
raised
so
far
to
the
bill.
G
G
That's
using
data
has
grown
accustomed
to
there,
not
being
any
sort
of
regulatory
framework
to
speak
of
the
ftc
has
done
a
little
bit,
but
not
very
much,
and
the
biggest
thing
to
date
has
been
the
eu's
gdpr
like
global
data
privacy
rule,
but
here
in
america
there's
only
these
three
states
that
have
gotten
something
on
the
books
that
it
firmly
provides
some
sort
of
power
for
consumers,
and
now
the
the
business
interests
in
the
in
the
state
are
in
the
country
are
starting
to
take
notice
and
I
think
something's
got
to
give
and
I'm
tired
of
what's
giving
being
the
consumer.