Feinstein proposes tougher breach notification law

Share this article:

Sen. Dianne Feinstein (D-Calif.) on Monday toughened her proposal to require organizations to notify people of breaches that compromise their personal data.

In January, Feinstein introduced a bill based on California's security breach notification law. But after a string of recent data breaches and in working with privacy-rights advocates, Feinstein said in a statement that she decided "more needed to be done to protect Americans."

The new version of the bill is stronger than the California law in several ways, according to Feinstein. While California's law covers unencrypted electronic data, her bill covers both electronic and non-electronic data and encrypted and unencrypted data.

It also allows individuals to put a seven-year fraud alert on their credit report, and addresses what Feinstein calls a major loophole in California's law by laying out specific requirements for what must be included in notices.

Her bill also carries stiffer civil penalties - $1,000 per individual an organization failed to notify or not more than $50,000 per day while an organization fails to notify anyone. The legislation allows exceptions for law enforcement or national security purposes.

"The fact of the matter is that your buying habits, your bank accounts, your Social Security number, your drivers license - all of your personal data - today is being collected, collated, distributed, bought, sold - without your knowledge or consent," Feinstein said.

"We desperately need a strong national standard that says whenever a data system is breached, everyone who is at risk of identity theft must be notified."

A Senate Judiciary Committee is scheduled to hold a hearing on Feinstein's bill Wednesday.

http://feinstein.senate.gov

Share this article:
You must be a registered member of SC Magazine to post a comment.
close

Next Article in News

Sign up to our newsletters

More in News

Ground system for weather satellites contains thousands of 'high-risk' bugs

Ground system for weather satellites contains thousands of ...

An audit of the Joint Polar Satellite System ground system revealed thousands of vulnerabilities, most of which will be addressed in two years when the next version of the system ...

Threat report on Swedish firms shows 93 percent were breached

The study by KPMG and FireEye also found that 49 percent of detected malware was unknown.

Former acting HHS cyber director convicted on child porn charges

Former acting HHS cyber director convicted on child ...

Timothy DeFoggi, who was nabbed by the FBI last year in its Operation Torpedo investigation was convicted by federal jury in Nebraska.