Feinstein proposes tougher breach notification law

Share this article:

Sen. Dianne Feinstein (D-Calif.) on Monday toughened her proposal to require organizations to notify people of breaches that compromise their personal data.

In January, Feinstein introduced a bill based on California's security breach notification law. But after a string of recent data breaches and in working with privacy-rights advocates, Feinstein said in a statement that she decided "more needed to be done to protect Americans."

The new version of the bill is stronger than the California law in several ways, according to Feinstein. While California's law covers unencrypted electronic data, her bill covers both electronic and non-electronic data and encrypted and unencrypted data.

It also allows individuals to put a seven-year fraud alert on their credit report, and addresses what Feinstein calls a major loophole in California's law by laying out specific requirements for what must be included in notices.

Her bill also carries stiffer civil penalties - $1,000 per individual an organization failed to notify or not more than $50,000 per day while an organization fails to notify anyone. The legislation allows exceptions for law enforcement or national security purposes.

"The fact of the matter is that your buying habits, your bank accounts, your Social Security number, your drivers license - all of your personal data - today is being collected, collated, distributed, bought, sold - without your knowledge or consent," Feinstein said.

"We desperately need a strong national standard that says whenever a data system is breached, everyone who is at risk of identity theft must be notified."

A Senate Judiciary Committee is scheduled to hold a hearing on Feinstein's bill Wednesday.


Share this article:
You must be a registered member of SC Magazine to post a comment.

Next Article in News

Sign up to our newsletters

More in News

CryptoWall surpasses CryptoLocker in infection rates

CryptoWall surpasses CryptoLocker in infection rates

A threat analysis from Dell SecureWorks CTU says that CryptoWall has picked up where its famous sibling left off.

Professor says Google search, not hacking, yielded medical info

Professor says Google search, not hacking, yielded medical ...

A professor of ethical hacking at City College San Francisco came forward to clarify that he did not demonstrate hacking a medical center's server in a class.

Syrian Malware Team makes use of enhanced BlackWorm RAT

Syrian Malware Team makes use of enhanced BlackWorm ...

FireEye analyzed the hacking group's use of the malware, dubbed the "Dark Edition" of BlackWorm.