Jordan Francis
banner
jordfran.bsky.social
Jordan Francis
@jordfran.bsky.social
Senior Policy Counsel @futureofprivacy.bsky.social | Nonresident Fellow cordellinstitute.wustl.edu | JD, UMN Law | CIPP/US, CIPP/E, CIPM | Views expressed here are my own. Likes and reposts are not endorsements.
Pinned
I'm excited to share a new a paper by me, "Data Minimization’s Substantive Turn: Key Questions & Operational Challenges Posed by New State Privacy Legislation." Read it here: fpf.org/blog/fpf-unv...
FPF Unveils Paper on State Data Minimization Trends
Today, the Future of Privacy Forum (FPF) published a new paper—Data Minimization’s Substantive Turn: Key Questions & Operational Challenges Posed by New State Privacy Legislation. Data minimization is...
fpf.org
Yet another CCPA settlement announced today—the fifth of the year, by my count, and a second from the CA DOJ. oag.ca.gov/news/press-r...

Details: $530K civil penalty and injunctive terms with SlingTV, mostly concerning insufficient and overly burdensome opt-out procedures.
Attorney General Bonta Secures $530,000 Settlement with Sling TV, First Enforcement Action from DOJ's Sweep of Streaming Services
Sling TV confused and misdirected consumers seeking to exercise their right to stop the sale of their personal information OAKLAND — California Attorney General Rob Bonta today secured a settlement wi...
oag.ca.gov
October 30, 2025 at 9:05 PM
Hot off the presses: Issue brief by me and my colleague Justine on new regulations from @calprivacy.bsky.social concerning automated decisionmaking technology, risk assessments, and cybersecurity audits

🔗 fpf.org/wp-content/u...
fpf.org
October 22, 2025 at 3:42 PM
Reposted by Jordan Francis
📢 NEW: EPIC published a new report today that examines how state Attorneys General are advancing privacy enforcement across the U.S. (2020–2024).

220+ cases. 35 letters. 20 investigations.

Read more: epic.org/state-ag-pri...
State Attorneys General & Privacy: Enforcement Trends, 2020-2024
epic.org
October 22, 2025 at 1:45 PM
Added to my reading list: New report from EPIC on "State Attorneys General & Privacy: Enforcement Trends, 2020-2024"

🔗 epic.org/wp-content/u...
epic.org
October 22, 2025 at 1:08 PM
For all the #privacy academics out there: In case you missed it, submissions are open for FPF's annual Privacy Papers for Policymakers (PPPM) award! You have until Oct. 30 to submit the best privacy scholarship from the past year.

⏩ See details here: fpf.org/privacy-pape...
Privacy Papers for Policymakers Call for Papers
The Future of Privacy Forum (FPF) invites privacy scholars and authors with an interest in privacy issues to nominate finished papers for consideration for FPF’s annual Privacy Papers for Policymakers...
fpf.org
October 15, 2025 at 8:55 PM
The Florida Attorney General filed a lawsuit alleging violations of the Florida Digital Bill of Rights. The prayer for relief includes civil penalties "up to $150,000 per violation," which is SIGNIFICANT.

Read the complain here: s3.documentcloud.org/documents/26...
October 15, 2025 at 2:07 PM
Even in the "off-season" for legislative tracking, California is keeping me busy. Governor Newsom signed several privacy bills today, including AB 566, requiring businesses that develop a browser to include a user-enabled setting to send an opt-out preference signal ⬇️
www.gov.ca.gov/2025/10/08/g...
Governor Newsom signs data privacy bills to protect tech users | Governor of California
www.gov.ca.gov
October 8, 2025 at 10:26 PM
Minnesota and New Hampshire joined the "Consortium of Privacy Regulators," according to CalPrivacy. The consortium now includes California, Colorado, Connecticut, Delaware, Indiana, New Hampshire, New Jersey, Minnesota, and Oregon.
October 8, 2025 at 5:18 PM
It's an important day in state privacy law as both the Maryland Online Data Privacy Act and youth privacy amendments to the Colorado Privacy Act go into effect.

⏩ Looking to stay on top of all these state laws? See FPF's effective dates chart at fpf.org/statelaws.
Key Dates for State Privacy Laws – Future of Privacy Forum
A significant new chapter for data privacy protections in the United States has commenced as more than twenty recently enacted significant state privacy laws have taken effect by July 1, 2025. To assi...
fpf.org
October 1, 2025 at 4:08 PM
Excited to share that I have been promoted to Senior Policy Counsel! Much like the state privacy law landscape, I've grown and evolved during my two years at FPF, and I'm excited to take on new responsibilities. As always, I'm grateful to my colleagues for their support and confidence in me.
September 26, 2025 at 5:38 PM
The Massachusetts Data Privacy Act (S.2608) passed the Senate 40-0 today, with several adopted amendments.
The 2025 state legislative session is winding down but not over yet. Last week the Massachusetts Senate Committee on Ways & Means favorably reported a new comprehensive privacy bill, S.2608, as a substitute for S.2516. Read it here: malegislature.gov/Bills/194/S2...
What changed between drafts?
Bill S.2608
malegislature.gov
September 25, 2025 at 9:10 PM
The 2025 state legislative session is winding down but not over yet. Last week the Massachusetts Senate Committee on Ways & Means favorably reported a new comprehensive privacy bill, S.2608, as a substitute for S.2516. Read it here: malegislature.gov/Bills/194/S2...
What changed between drafts?
Bill S.2608
malegislature.gov
September 23, 2025 at 6:47 PM
Some personal news: I wanted to share that I recently relocated from Washington, DC back to Madison, WI, a city near-and-dear to my heart. I am extremely grateful to be continuing my role with FPF remotely, and I look forward to connecting with privacy and tech policy folks in Wisconsin!
September 12, 2025 at 7:19 PM
One of many important privacy bills to follow in California this week as they approach the end of the legislative session:
Great to see #CALeg #AB566 pass the Senate, now back to the Assembly. This is the California Opt Me Out Act, that requires browsers to support Global Privacy Control (GPC) aka Opt-Out Preferences Signals (OOPS)
September 10, 2025 at 8:58 PM
Pleased to see my 2024 report on the state comprehensive privacy laws cited in this recent working paper by the U.N.'s International Labour Organization: www.ilo.org/sites/defaul...
www.ilo.org
September 4, 2025 at 9:08 PM
We are days away from the Minnesota Consumer Data Privacy Act going into effect! Curious how this law fits into the broader state comprehensive privacy law landscape? Check out my blog post from when this law was signed last year: fpf.org/blog/the-nor...
July 28, 2025 at 9:05 PM
Materials are published the the CPPA's July 24 board meeting: cppa.ca.gov/meetings/mat...
Meeting Materials July 24, 2025 - California Privacy Protection Agency (CPPA)
cppa.ca.gov
July 22, 2025 at 4:23 PM
Reposted by Jordan Francis
We are hiring a Privacy Counsel for TikTok's Americas Public Policy team! This is a great opportunity to work on a unique set of privacy issues at a pivotal moment for TikTok.

lnkd.in/eYQgKxzb
Privacy Counsel, Americas Public Policy
View our opening for Privacy Counsel, Americas Public Policy and learn more about what it's like to work at TikTok!
lnkd.in
July 17, 2025 at 5:08 PM
Happening today: AEI and CDT are hosting a panel on "Federal Data Consolidation: Protecting Civil Liberties in the Digital Age"

Livestream available here: cdt.org/event/federa...
Federal Data Consolidation: Protecting Civil Liberties in the Digital Age
Date: Wednesday, July 16, 2025 Time: 10:00 AM to 11:00 AM ET The American Enterprise Institute and the Center for Democracy & Technology are pleased to invite you to join an upcoming event examining t...
cdt.org
July 16, 2025 at 1:48 PM
The next CPPA board meeting is scheduled for Thursday, July 24.

⏩ The agenda includes discussion of and possible action on important ongoing rulemaking initiatives, including ADMT, risk assessments, cybersecurity audits, and the DROP requirements.

⏩ Agenda here: cppa.ca.gov/meetings/age...
July 15, 2025 at 1:05 PM
FPF's recently updated effective dates chart is a one-stop-shop for key dates and links to existing privacy laws, enacted amendments, and broadly applicable sectoral laws (mostly health and youth privacy focused).

⏩ Find it here: fpf.org/wp-content/u...
fpf.org
July 14, 2025 at 4:22 PM
Internship opportunity for Fall 2025: FPF recently launched The Hannah Schaller Memorial Internship by ZwillGen.

This internship honors Hannah Schaller, who started her privacy career as a policy intern in the FPF D.C. Office. Learn more about the position and apply here: fpf.org/the-hannah-s...
The Hannah Schaller Memorial Internship
The Hannah Schaller Memorial Internship by ZwillGen, announced June 11, is a new internship available Fall 2025 and Spring 2026 in the FPF Washington, D.C. office. The internship honors Hannah Schalle...
fpf.org
July 10, 2025 at 2:26 PM
In case you missed it, the Connecticut Data Privacy Act was amended yet again this year. The recently signed SB 1295 makes numerous changes to the law, including greatly expanded applicability, new consumers rights, and more.

⏩ You can read my coverage here: fpf.org/blog/the-con...
July 1, 2025 at 4:07 PM
Lots of other important things happening today, but add this to your reading queue ⬇️
New draft from me, “Privacy and Disinformation,” on why privacy law, not speech or economic regulation, is the best path forward for fighting social media disinformation.

Read the draft here (and later finalized in UC Law Journal): papers.ssrn.com/sol3/papers....
June 27, 2025 at 6:35 PM