Obama proposal: Hacked companies have 30 days to fess up

[InfoSec News <alerts () infosecnews org>]

http://money.cnn.com/2015/01/12/technology/security/obama-privacy-law/index.html

By Jose Pagliery
CNNMoney
January 12, 2015

In a State of the Union preview, President Obama on Monday demanded 
quicker confessions from companies that lose your data as well as better 
privacy for students.

One proposed law would give a company 30 days to let you know if your 
personal information -- such as your address or Social Security number -- 
has been exposed by hackers or careless employees.

The Personal Data Notification & Protection Act is an attempt at a 
nationwide, uniform rule. Right now, there are 47 different state laws 
that govern data breaches. Depending on the situation, people in some 
states get notified, while others are left in the dark. It's a mess.

Data breaches are increasingly common. Last year, hackers broke into Home 
Depot, Albertson's and so many others that CNNMoney developed its own 
tool: What hackers know about you.

[...]



--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/