Lab Notes: August 2022

FTC launches privacy rulemaking to provide privacy protections for Americans Earlier this month, the Federal Trade Commission (FTC) announced it is moving forward with privacy rulemaking to address the issue of excessive data collection and use of personal information in the absence of a federal privacy law. CR joined over 40 organizations last year calling on the Commission to issue a privacy

An early look at how companies handle CCPA requests submitted by Authorized Agents

Under state laws like the California Consumer Privacy Act (CCPA), consumers finally have a right to control what happens with their data. Under CCPA, consumers can enlist an authorized agent to help them exercise these rights, granting the agent authority to submit data requests to companies on their behalf. Consumer Reports believes privacy is a right all consumers deserve, and

Opportunity: Help CR design an IoT product labeling system

We’re looking for systems thinkers to help prototype and pilot a next-gen product labeling system. We’ll be filling contract and full-time roles starting this Fall. If you’re interested in working with CR on this, drop us a line at so we can explore how we might work together. In this note, we’re sharing some of our preliminary thinking to

Opportunity: Product Support

We’re seeking a product manager with technical expertise and a passion for privacy to join Consumer Reports on a contract basis. This is a good opportunity for a mission-oriented product professional who wants to experience a startup social enterprise and help bring an experimental product to market. Scope: You will be supporting Permission Slip, an experimental consumer product currently in

Lab Notes: July 2022

Scrutiny on VPNs: deceptive data practices and marketing claims U.S. Rep. Anna G. Eshoo and Senator Ron Wyden sent a letter to the Federal Trade Commission (FTC) urging regulators to address deceptive data practices by virtual private network (VPN) providers. The lawmakers cited research CR released last December which found that 75 percent of leading VPN providers misrepresented their products and technology, or

Identity Verification: Why it matters for consumer privacy (1 of 2)

When we get a driver’s license, start a job, open a bank account, or start some other thrilling administrative event, most of us know we need to bring some identification. We’re prepared for the small headache of providing phone numbers, maiden names, and digging up paper documents. This is identity verification, the process of proving that you are actually you.

Identity verification: flows we’ve seen in CCPA data requests (2 of 2)

Identity verification is a critical part of exercising most data rights. Are you requesting a copy of your purchase history, or did an identity thief make the request? In part one of this series, we defined identity verification, explained its role in privacy law, and summarized what California privacy regulation says about verification. In this post, we’ll highlight some of

Lab Notes: June 2022

CR’s hiring Code is law. CR is recruiting engineers, public interest technologists, and entrepreneurs to develop innovative new ways of serving consumers. See opportunities here. What does the overturn of Roe v. Wade mean for consumers? The Supreme Court’s decision to overturn Roe v. Wade raises urgent questions about how access to abortion varies across states and whether healthcare data is

New opportunities at CR

We're hiring! CR is recruiting engineers, public interest technologists, and entrepreneurs to develop innovative new ways of serving consumers. You’ll be joining a lean team that works openly and builds out the earliest, most experimental part of CR’s innovation pipeline. You’ll create and ship technologies that have a real impact on the marketplace, the law, and people’s lives. CR's work

Opportunity: Security Engineering Support – Data Rights Protocol

We’re seeking a security engineer with a passion for privacy to contract with the Digital Lab team. This is a remote consulting opportunity for a seasoned engineer who wants to work on an open standards project and cares about advancing digital rights in the United States.   Scope: You will be supporting the security development of the Data Rights Protocol.

View More