New SEC Rules on Cyber and Data Security Forthcoming

The SEC is mulling over requiring disclosures by publicly traded companies concerning data security and data breaches. 

This should come at no suprise as in 2011, the Corporate Fiannce Division issued guidance on disclosing data security and data breaches in CF Disclosure Guidance: Topic No. 2, Cybersecurity, Oct. 13, 2011.

What’s the SEC considering risk factors that need to be disclosed?

  •  if the risk of data breaches would make an investment in the business r…

States Lose (Again) with Federal Data Breach Law

The federal data breach bill moving through Congress will preempt all state laws. Most states have stronger data breach laws than the federal bill.

Some say the federal bill is being pushed by the business lobby. It makes sense. Businesses are being sued after data breaches and it is costing millions and millions. Hundreds of millions. 

California, has stronger data security statutes and the California Consumer Federation says the federal bill will:

•Eliminate notif…

Top Concern for Credit Unions Rhymes with Lata Becurity

Data Security is the number one concern for credit unions according to the National Association of Federal Credit Unions. 

Their concern is founded in fact. In 2014, 317 million new pieces of malware were created according to Symantec’s 2015 Internet Security Threat Report. Data breaches have been increasing by 20% per year. 

This group supports legislation that includes:

  • Payment of Breach Costs by Breached Entities
  • National Standards for Saf…

5 Business Associations Flag the Flaws in Federal Data Breach Bill

A coalition of business groups, including:

  • National Association of Convenience Stores
  • National Association of Realtors
  • National Grocers Association
  • National Restaurant Association
  • National Retail Federation

are urging federal lawmakers to retain a provision in federal data breach legislation that will require 3rd party vendors to notify consumers when they experience a data breach. 

adminPosted inlegislative trend, retail data breach

Cost of Data Breach: $20 Million for 1 settlement with 1 credit card company

Target’s holiday 2013 data breach continues to breed lawsuits and settlements. Target recently settled with Mastercard for $20 million. 

The $20 million will go to financial institutions to:

  • covers costs that banks incurred to reissue credit cards and debit cards
  • Cover the cost of fraud that resulted from the exposure of customer information

Fortune…

Another State Passes Data Security Protections

Alabama is the 48th state to enact data security laws, and one of a few that have revamped data security statutes post major retail data breaches. The Alabama legislation will triger notification within 30 days when any of the following information is hacked:

  •  medical history, mental or physical condition, or medical treatment or diagnosis by a health care professional;
  • health insurance policy number or subscriber identification number and any unique identifier used …

Data Security and the Federalists

Data Security and data privacy is a near and dear to Libertarian types. Think Rand Paul. Libertarian types look to the Federalists papers to justify constitutional positions, such as protecting Americans from government intrusion into their personal, private data. 

Pointing to Federalist Paper 33 and 44, when a national interest exists, it is necessary and proper for the federal government to act. 

adminPosted indata privacy, legislative trend, retail data breach