Reuters reports: A congresswoman may strengthen a data breach bill to quell concerns it would do too little to force companies to alert customers of data breaches promptly. The draft version of the bill from Rep. Mary Bono Mack requires companies that experience a breach to tell law enforcement within 48 hours and to begin…
Category: Breach Laws
Owners of hacked computers will be punished, says official
Wow. Look at this news from Turkey: Computer users whose computers are hacked by Anonymous, an international group of hackers that has vowed to attack government websites in protest of an Internet filter system the government plans to introduce in late August, will be held legally accountable for the use of their computers in the…
Rep. Mary Bono Mack Releases Discussion Draft of SAFE Data Act
The following statement was issued by Rep. Mary Bono Mack today: Calling a recent dramatic increase in cyber attacks “a threat to the future of electronic commerce,” Congresswoman Mary Bono Mack (CA-45), Chairman of the House Subcommittee on Commerce, Manufacturing and Trade, today released a discussion draft of the Secure and Fortify Data Act (SAFE…
Sony PlayStation hacks show need for data breach disclosure laws
Lisa Banks reports: The repeated hacking of Sony’s PlayStation Network hack has demonstrated the need for Australia to adopt mandatory data breach disclosure laws, a local security director has claimed. While the PlayStation Network was back up and running for Australian users today, director of Clearswift, Phil Vasic, said mandatory disclosure laws would help prevent…
This morning in Congress: “Sony and Epsilon: Lessons for Data Security Legislation”
The House Energy & Commerce Committee Subcommittee on Commerce, Manufacturing, and Trade has scheduled a hearing on Thursday, June 2, 2011, in 2123 Rayburn House Office Building. The hearing, entitled “Sony and Epsilon: Lessons for Data Security Legislation,” will begin 15 minutes after the conclusion of the full committee markup. Background Memo Witness List Jeanette…
German DPAs Publish Comprehensive FAQs on Statutory Data Breach Notification Requirement [repost]
[repost] The German Data Protection Authorities of Berlin and North Rhine-Westphalia have issued a paper containing Frequently Asked Questions about the German statutory data breach notification requirement that went into effect on September 1, 2009. The paper provides detailed information on key questions concerning the procedure for notification as required by Section 42a of the…