With the latest uber data breach firing in the social media, shows huge response towards language used in state law notifications.
Reactions for the language used in many state laws are reflecting the urgency for the consumers to get informed of a discovered data breach which has been brought on lawsuits states Pennsylvania, Los Angeles and Chicago.
The problem lies with the state legislators, consumers and company officials showing a clear miscommunication that is because of having different ideas about “unreasonable” and what it really means.
Colorado Republican state Rep. Cole Wist said “This kind of language is too loose and subjective,” and suggests a bipartisan measure which will require the consumers be notified of a breach within 30 days with sufficient evidence personal information available to avoid it being misused. The Residents should also be informed about the date of the breach and a description of what was accessed in detail and the requirement of an immediate response.
‘Reasonable’ time is not good enough! Wist expressed, who has been an identity theft victim earlier. He states that a lot of harm can happen in a short amount of time and the burden now on the consumers to set the ship upright. “Once the data gets breached it creates years of heartache, “says Wist.
Wist and legislators in a number of other states are on tries to gear up consumer protections by defining how quickly residents must be notified of a data breach and extending the category of “personal information” – leaked covered under the law. In such circumstances, some also seek to bar credit reporting agencies and charge consumers to freeze their credit information.
The hackers are getting cleverer day by day, and we can’t sit back on our heels. It’s important that the legislators have to take the initiative.
This year, a minimum of 29 states are taking up consumer security breach notification bills, states the National Conference of State Legislatures. with more than a dozen states, measuring the required residents to be notified within a time span ranging from 48 hours up to 60 days. Most of the bills also state that notification can get delayed if the law enforcement determines to interfere with a criminal investigation.