Brandon Pugh, cyber security and emerging threats director at the R Street Institute, told this newsletter the order wasn’t a “full solution”, but did think “it has the potential to be part of the solution”. 

Pugh thinks a comprehensive federal data privacy and security law is needed and he noted that many recent administration policy documents call for exactly that kind of law. 

However, he pointed out this is a complex issue and requires the balancing of competing interests and that, even though adversaries will look to steal sensitive data, “data is important for innovation and fuels many technologies”.

One of the mitigations Pugh suggested was to impose controls over the amount of data collected in the first place. We think changes that have occurred over the last couple of years in the ad tracking ecosystem are a good example of that principle in practice.