ITIF：2025年众议院能源和商业委员会关于数据隐私的评论报告（英文版）

A. How can a federal comprehensive data privacy and security law account for different roles in the digital economy (e.g., controllers, processors, and third parties) in a way that effectively protects consumers? Data controllers warrant heightened regulatory scrutiny due to their decision-making authority, whereas data processors have contractual obligations to data controllers. Thus, the ultimate responsibility should fall onto data controllers to ensure they and their contracted data proce