No Breach Left Behind

Massachusetts is considering legislation (H. 213) that would require retailers to pay for losses that occur as a result of security system breaches.

AND:

Maxx Mess

In January, retailer TJX Companies, Inc. announced that someone had hacked into its computer network that handles customer transactions for some 2,500 retail stores, resulting in the theft of personal credit, debit, and driver license information as far back as 2003. A week later, fraudulent use of the stolen information had been detected overseas. Banks have canceled hundreds of

thousands of credit and debit cards. Numerous class action suits have been filed, including, in Canada.

AND:

New York to World: “Watch Your SSN Digits!”

Watch out for New York’s new Social Security Number Protection Law. The statute restricts the communication and use of Social Security numbers on or after January 1, 2008.

AND:

The Other Side of the Pond

The Brits just cranked up their data protection enforcement. Last week, the Government announced that it will introduce custodial sentences of up to two years’ imprisonment for those found guilty of knowingly or recklessly obtaining or disclosing personal data from data controllers without their consent; or selling such personal data.