Welcome back to Techne! Earlier this week I reorganized my note on land reclamation efforts in U.S. cities and ended up compiling a bunch of maps of the changing shorelines from across the country. This included Boston’s land reclamation between 1630 and 1995; New York City’s lower Manhattan expansion; Charleston’s 1670 boundaries compared to today; New Orleans’ containment of Lake Pontchartrain in the 1930s; and Chicago’s reclamation of 673 square miles of watershed.   

Notes and Quotes

• The Stanford Institute for Human-Centered Artificial Intelligence (HAI) just released the 2024 AI Index Report, which features lots of great data on advanced AI models. For example, OpenAI’s GPT-4 cost an estimated $78 million to train, while Google’s Gemini Ultra cost $191 million. The United States is home to 61 of the top AI models, leading China (15), the EU (21), and the U.K. (4). The number of U.S. regulatory agencies issuing AI regulations increased to 21 in 2023 from 17 in 2022. 
• Lumina Probiotic, a once-use rinse that replaces harmful mouth bacteria with a strain that dramatically reduces cavities, is now available to pre-order. Here’s a helpful long read from Cremieux Recueil’s on cavities, dental health, and how Lumina works. 
• Sens. Mike Lee, Martin Heinrich, James Risch, and Catherine Cortez Masto, all members of the Senate Energy and Natural Resources Committee, have introduced the Geothermal Energy Optimization Act. The bill aims to accelerate the adoption of geothermal energy and would put geothermal permitting on an even playing field with oil and gas.
• I know very little about the organ donation system, so it was a surprise to learn that 1 out of 4 donated kidneys end up thrown in the trash. Statecraft’s Santi Ruiz talked with Jennifer Erickson and Greg Segal about how to fix the organ donation network.  
• The Prerun YouTube Channel posted a great explainer on how drones are being used in Ukraine. For some further context, check out this New York Times article on how electronic warfare is reshaping Ukraine’s battlefields and read about why the Pentagon is worried over the cost of Houthi drone attacks. 
• The Supreme Court handed a win to California homeowner George Sheetz last week, ruling that a fee that El Dorado County, California required him to pay to build his home was unconstitutional. The ruling represents a victory for homeowners facing similar disputes with local authorities over excessive permit requirements.
• A new book by social psychologist Jonathan Haidt has sparked debate by arguing that the anxiety and depression affecting teens today is largely due to the influence of phones and social media. Critics have objected to Haidt’s thesis and supporting evidence, as detailed in this Vox discussion.  
• Rep. Adam Schiff introduced the Generative AI Copyright Act, which would require companies to file their AI models with the U.S. Copyright Office. The bill has already earned support from the creative community. In related news, the creators of Tess have developed what they claim is the first properly licensed AI image generator. 
• While investigating a 2020 fire, the Denver police obtained a “reverse warrant” from a judge to review certain users’ Google search history, raising privacy concerns that eventually led to a court challenge. A recent post from Brent Skorup explains why the Colorado Supreme Court’s 2023 decision in Colorado v. Seymour held that the reverse warrant violated the Fourth Amendment. 
• On Monday, President Joe Biden announced an agreement between Samsung and the Department of Commerce to bring the company’s advanced semiconductor manufacturing to Texas. Private investment still swamps government monies. The $40 million in CHIPS funding from the government is a fraction of Samsung’s $40 billion investment in Texas. 
• Researchers at Harvard University have developed a novel “metafluid” that can switch between Newtonian and non-Newtonian fluid states by leveraging small spheres that buckle under pressure. Programmable fluids are likely to be found in hydraulic actuators in robots, in intelligent shock absorbers, and in optical devices that can quickly transition from clear to opaque. 

The Expansive and Expensive American Privacy Rights Act

In early 2020, as a California privacy law came into effect and other states toyed with similar legislation, I talked with a heavy hitter at one of the big tech companies about state privacy efforts. When I asked him what would happen if even more states passed privacy laws, he said something I will never forget: We will be defensible, but I am not sure we could ever be technically compliant. 

With privacy laws now in place in 15 states, it looks like the problem he hinted at has only intensified. For example, if you type TheDispatch.com in the address bar or try to access other online resources, your request will often get bounced around from online computer to online computer. The reach of the internet is truly global, so there is no guarantee that the computers you are requesting will be in your own state, or even your own country. What happens when states differ in their privacy protections? Whose law should apply? 

The drive to harmonize privacy law and create one set of rules made a federal privacy bill a live issue for over a decade. But federal online privacy legislation has never gotten past the finish line. In recent years, one of the main holdouts has been Sen. Maria Cantwell, chair of the Senate Committee on Commerce, Science, and Transportation. So it was a bit of a surprise to see the senator just announce a draft privacy deal, written in cooperation with Rep. Cathy McMorris Rodgers, the chair of the House Energy and Commerce Committee. McMorris Rodgers is retiring soon, so the circulation of the discussion draft of the American Privacy Rights Act (APRA) of 2024 feels important. 

This bill is expansive. Among other provisions, it: 

• minimizes the data that covered companies can collect, keep, and use;
• grants users the ability to prevent the transfer or selling of their data; 
• requires affirmative express consent before data can be transferred to a third party;
• requires that companies let people access, correct, delete, and export their data; and 
• allows individuals to opt out of targeted advertising.

Even with all of these provisions, two conflicts that have long kept a federal privacy bill from being inked are bound to resurface: preemption and a private right of action. 

Democrats, especially from California and Illinois, have been against federal preemption provisions because they would end up cutting down their state privacy laws. Preemption can either be narrowly targeted or it can be broad, and if it is broad then the federal law supersedes the state laws—and state laws are stricken from the books. APRA’s preemption is broad and would wipe clean all of the state laws.

 Just two years ago, the so-called four corners discussion among commerce leaders on both sides of the aisle led to the introduction of the American Data Privacy and Protection Act or ADPPA. It was the first comprehensive privacy law after years of disagreement between Republicans and Democrats. But Cantwell wasn’t on board. As she explained at the time, House lawmakers needed to include tougher enforcement measures, which meant “limits on forced arbitration and a broad right for individuals to sue companies that violate the law.” So the bill went nowhere.

Additionally, concerns over a private right of action have also stymied the prospects of federal online privacy legislation in the past. Private right of action, or PRA, enables a person or organization to file a lawsuit in court over a purported breach of privacy law and then seek remedies for that supposed infringement. Discussions have waived over when the PRA should go into effect. ADPPA allowed a private right of action after four years of the bill’s enactment. APRA lowers that down to 180 days after the date of enactment. APRA also reduces the grace time that companies are given to comply with the privacy law once they have been alerted to a potential violation. The “cure period,” as they are called, was brought down from ADPPA’s 45 days to now 30 days with APRA.

The new bill also removes “pre-dispute joint action waivers,” which prohibit users from participating in a class action suit, a sticking point in negotiation for Cantwell. On top of this, it expands who is covered by the law to include nonprofits and telecommunications common carriers. And the proposed APRA includes a clause that terminates the Federal Trade Commission’s (FTC) current rulemaking procedure on commercial surveillance. In its place, the agency is given targeted rulemaking authority. 

Not everyone is okay with the changes. Sen. Ted Cruz has signaled that he’s not comfortable with shifting to a private right of action. Moreover, he’s worried about giving the FTC new authority that could be used to dampen competition. His worries make sense to me. 

Under Chair Lina Khan, the FTC has pushed the bounds of agency authority. It has begun a long and arduous rulemaking process in privacy without proper congressional approval. The FTC administers several privacy laws, including the Children’s Online Privacy Protection Act, the Equal Credit Opportunity Act, and the Fair Credit Reporting Act, but it does so through provisions granted in each law. Not so regarding privacy laws. While the agency hasn’t stepped beyond its limited bounds yet—as I described in this filing before the agency—Khan does seem especially itchy to enforce privacy. I’m not sure that giving extensive powers over a privacy law to the FTC would be a prudent move right now. 

There is no denying that privacy bills are expensive. When California ran the numbers for its 2018 California Consumer Privacy Act, it estimated the initial compliance costs would land at $55 billion, about 1.8 percent of the gross state product (GSP). As for the upper bound, estimates suggested the bill could have cost as much as 4.6 percent of GSP.  

Privacy bills shift the power relations between internet players. While research on U.S. privacy laws is limited, studies on the impact of Europe’s General Data Protection Regulation (GDPR) give us a sense of what to expect. After GDPR went into effect, smaller vendors were more commonly dropped by the bigger players, which increased the relative concentration of the vendor market by 17 percent. Users spent less time on European websites, and the number of deals in the EU backed by venture capital dropped by 26.1 percent compared to their American counterparts. As one paper dryly explained, “Overall, the post-GDPR online environment may be less competitive for online retailers and may be more difficult for EU consumers to navigate through.”

Discussions in Congress are inching toward a comprehensive privacy bill, and by all measures, it is sure to have a dramatic effect across the United States. But I tend to think a lighter, more targeted regulatory touch could encourage compliance while fostering innovation, ultimately benefiting consumers and businesses alike. 

More and more, I’ve been thinking about privacy through the lens of a minimal viable product, or an MVP. MVPs are products designed with sufficient features to draw in early adopters and confirm the viability of a product concept. Why not apply this idea to regulation? A minimum viable regulation would be limited in scope and would produce information about the viability of enforcement. I’m still working through it, but it’s hopefully something we can explore more in depth down the road. Even if it might not work for Congress, I tend to think we should talk about regulations that protect consumers while maintaining the competitive integrity of the digital marketplace.      

Until next week, 

🚀 Will

Research and Reports

• Joshua Gans, a leading economist of digital markets, just released a new research paper about the commission structure of mobile apps, a key issue in the recent antitrust suit against Apple. He lands on three takeaways: “First, unregulated app commissions are set at a level that maximises consumer surplus. Second, eliminating app commissions will lead to higher device prices. Third, requiring a menu of options for consumers as to how device makers receive subsidies from app developers constrains app commissions in a way that provides a more equal balance between consumer versus app developer interests.”
• Many large cities fight over how much space should be dedicated to parking over walkways. What happens when a region takes away parking and moves toward walkable environments? A new paper on Seoul finds that “walkable environments positively affect nearby commercial property values” and “provide a variety of suggestions for encouraging the creation of walkable environments and increasing the economic benefits of commercial properties.”