Welcome to the Future!
Canada is considering imposing $100,000 fines on businesses that fail to notify customers of data breaches. Currently Canada utilizes a regional patch work of data security legislation, the national fine for businesses would be a first for Canada. [Info Security Magazine]
Refreshing Recollection: The FCC can and does impose fines on businesses, like it did on two telecom companies …
New Jersey Legisalture is moving a bill that would place new burdens on business and government in the Garden State.
Businesses & government would be required to maintain databases that allow quick contact to customers/clients/citizens in case of a data breach.
The bill also expands the type of breaches that have to be disclosed to include usernames and passwords. [NJ A3146]
Florida passed a data security bill earlier this year. A Republican in a neighboring state, Alabama, is filing legislation to require companies and financial institutions to disclose to customers when their personal information is exposed.
The Alabama Governor also initiated a push to upgrade all state software to better protect personal privacy.
Posted indata privacy, legislative trend, retail data breach
Data breaches. There’s a new one every week. Cybersecurity experts say the only way to address the issue is long term legislative and political reform. Bruce Schneier, a fellow at the Berkman Center for Internet & Society at Harvard says there should be more regualtion on business to secure our personal information. What does those regulations looks like? … News reports allege that Staples had a data breach. There’s a long list of retailers that have endured a data breach. Forbes discusses the role personal repsonsibility has in data breach corrections. Legislating personal responsibility is challenging. The modus operandi of the Legislature is putting into place new regulations on retailers, banks and/or creating new civil or criminal penalties. [Forbes]<... Almost a year ago, Target experienced a large data security breach through a third party vendor. This data breachprompted federal and state legislation, and class action law suits. The Target data breach led to at least 27 federal causes of action in 18 different federal courts. MDL, multi district litigation, is a hot topic for the Texas Legislature. MDL was addressed in 2003 tort reform legislation and in various asbestos litigation reforms. If Texas creates causes of act… All federal debit and credit cards will require PIN and chip technology. President Obama required the data security measures by issuing an executive order. The Order is heralded by the National Retailers Federation. [Roll Call]
Posted in2015 legislation, banking, data encryption, data privacy, legal trend, legislative trend, retail data breach
This interim legislative committees have been studying data security after a rash of data breaches. It’s a complex issue. How to protect consumers, how to protect businesses and how to protect banks will be a tricky balance for the Legislature. We need to add one more policy consideration- how data security policies impact innovation. Texas wants to be a leader in innovation and utilizes economic development programs and favorable tax environment to draw leaders in innovation to Te… DropBox, the cloud storage service, was allegedly hacked. Logins and passwords are being published and bitcoin is being requested by the hacker. DropBox’s statement is that the hack came through a third party vendor, much like the Target hack. DropBox recommends enabling the two key log-in. Two key log-in methods have also been discussed in interim committee hearings as a standard for the state to consider adopting in 2015 legisaltion. Look for the phrase in any laundry list of dat… Even the Blizzard cannot prevent data breaches. Dairy Queen followed the 3 key responses. (1) Publicly list of affected stores (2) Offer identity repair services. (3) Work with law enforcement. As usual, the target of the hack was credit card information while in transit, and no PIN numbers or social security numbers which were hacked. [GrubStreet]Data Security Experts: Longterm Political & Legislative Reform
Data Breach: Staples
Refreshing Recollection: Retail Data Breach Leads to Multi District Class Action Litigation
Executive Action on Data Security. Next Step Executive Action in Texas.
Greatest Inhibitor to Innovation: Weak Data Security
Data Breach: DropBox
Data Breach Du Jour: Dairy Queen