CSO reports on reaction to the recently proposed Senate breach notification bill. Introduced by Sen. Pat Toomey (R-PA) and co-sponsored by four additional senators, the Data Security and Breach Notification Act of 2012 would set a national standard for breach notification preempting the 46 existing state laws. A representative from InfosecStuff applauded the bill, saying it "will make compliance easier for most businesses." Taos consultant James Arlen said the standard is "absolutely" necessary but expressed trepidation because he said the bill lacks data protection and notification deadline specifics, adding, "I'd suggest that there be some regulation around what is acceptable for encryption."
Full Story