Preemption of State Cybersecurity Laws: It’s Complicated

In a commentary for Lawfare, Jim Dempsey, a lecturer at the UC Berkeley Law School and a senior policy advisor at the Stanford Cyber Policy Center, addresses the proposed American Data Privacy and Protection Act, including the interactions among the bill’s definitions, its enforcement mechanisms, and its preemption of state law with respect to cybersecurity.