Industry Regulations

U.K.-clothing retailer FatFace has egg on its face after a botched disclosure letter customers and security professionals consider too late, too secretive and too hard to confirm.

Experts say the idea has merit – if only legislators can balance the promise with the potential liability and burden placed upon industry.

Today’s columnist, Steve Dickson of Netwrix, says that staying compliant with data privacy regulations like CCPA and GDPR requires storing sensitive data in secure locations.

Continuing a discussion kicked off earlier this week in the Senate, House lawmakers confirmed that legislation is in the works, pushing for answers on the balance between liability protection and the duty to protect consumers.

Historically, ransomware was not seen as government's problem any more than shoplifting: a crime against businesses that federal law enforcement saw as beyond its domain. But that may be changing.

There is no rule mandating a company to disclose a breach to the federal government, even when national security is a concern. That could change, however. In the words of Microsoft President Brad Smith, "this is about moving information fast, to the right place, so it can be put to good use."

In Episode 2 of the CISO Stories podcast, Sam Curry, chief security officer at Cybereason, interviews Ari Schwartz, managing director for cybersecurity at Venable, about the proposed policy changes the Cybersecurity Coalition plans to bring up to members of Congress.