data breach notification laws News

Hacked Firms Face ‘Frankenstein’ of State-Based Cyber Notification Laws

Last summer, Katherine “Kitty” Green received some disturbing news about the computer network at Florida Gulf Coast University, where she oversees a foundation for private donors. An outside data provider warned it had detected that hackers sneaked into the university’s …

SEC May Use Yahoo Case to Set Data Breach Disclosure Rules

Yahoo’s disclosure that hackers stole user data from at least 500 million accounts in 2014 has highlighted shortcomings in U.S. rules on when cyber attacks must be revealed and their enforcement. Democratic Senator Mark Warner last week asked the U.S. …

Attorney General Supports National Notification Standard for ID Theft

U.S. Attorney General Eric Holder, citing the recent massive data theft at retailer Target Corp., urged Congress on Monday to enact a national standard for notifying consumers about such breaches. “This would empower the American people to protect themselves if …

State Laws Provide Leeway For Businesses Reporting Data Breaches

A decade of lawmaking by U.S. states to ensure consumers are told when their data has been hacked still lets companies such as Target Corp. wait weeks or even months to disclose security breaches. Forty-six of 50 U.S. states have …