A US SENATOR has introduced legislation to protect users from online data breaches.
The bill, introduced by Senator Richard Blumenthal of Connecticut, proposes to impose fines on companies that are found to have been negligent with users' personal information.
According to the New York Times, the Personal Data Protection and Breach Accountability Act of 2011 would introduce regulations for companies that store online data for more than 10,000 people.
The regulations would require companies to follow specific data storage guidelines to ensure that personal information is stored and protected correctly, with fines for companies that do not adhere to the guidelines.
"The goal of the proposed law is essentially to hold accountable the companies and entities that store personal information and personal data and to deter data breaches," Blumenthal told the New York Times in a phone interview. "While looking at past data breaches, I've been struck with how many are preventable."
Cyber security is a hot topic in the US Congress, and the White House has been involved in recent discussions regarding online privacy legislation.
Blumenthal also critcised Sony's inept handling of the attacks on its servers earlier this year that put 77 million customers at risk. He said that if his bill passes, customers would be able to sue companies like Sony that do not take enough precautions.
"The Sony data breach has became a poster child of why we need this law," he said. "We were working on this legislation well before that data breach occurred, but Sony is a good example of why this law should exist."
The proposed bill might prevent some attacks, but it is unlikely to stop hacking. However, if it passes companies like Sony will have to pull up their socks or potentially face regulatory fines and lawsuits. µ
Tags: Security
How are they going handle the issue regarding the providers of marginally-secure software ? If simple hacks can be demonstrated with the software used on the server then whose fault is that - the owners of the server or the providers of the software ? I say it is the server owners because they are the ones who chose that marginally secure software.
I thought a lot of companies outsource their database managements? If so, then this wouldn't apply to any of them, right? All they have to say is they have no control or knowledge how personal info is store or secured.
Also, it says it will apply for storage of 10K plus, right? So couldn't a company just break up the records into groups of like 9000 and keep them at different locations or even outsource the management to different companies, making sure none of them have over 10,000?
if companies are going to hold onto sensitive client data, why shouldn't they be liable the same way banks or lawyers are?
This must be another corporeal scam like fracking all the drinking water in the United States so they can sell more bottled water as we all die!
The USA is a zoo. Pay the ESTA entrance fee to see it yourself.
Most likely this bill is designed to protect companies from lawsuits resulting from hacks to their databases. The companies will have to take some sort of fake "compliance" measures -- but not really change anything -- to be immune. Meanwhile, campaign contributions for Senator Richard Blumenthal will increase accordingly.
I hope he wangled some way in which some big shots can get rich from passing that bill if he actually wants it passed, I mean you have to be realistic, it's the U. S. of A.