Category: Regulations

The report calls for the EC’s European Network and Information Security Agency (ENISA) “to study the feasibility of a European information sharing and alert system to facilitate effective responses to existing and emerging threats to electronic networks.” Such a system would require the creation of a multilingual EU portal to provide detailed information on threats, risks, and alerts, the commission said.

Another proposal calls for businesses, users and government agencies to hold a “multi-stakeholder debate” on the balance between security and privacy, including the implications of RFID technology on end user privacy.

http://www.darkreading.com/document.asp?doc_id=96086&WT.svl=news2_3

For Brussels this technology tax is just one option given imminent change in the way the European Union budget is formed.

http://www.viruslist.com/en/news?id=187762489

The SEC and PCAOB arranged the roundtable to solicit feedback about Section 404 of the legislation, which requires companies to attest to the effectiveness of internal controls put in place to protect financial reporting systems and processes. “In practice it hasn’t always worked out that way,” he acknowledged.

Over the course of five panel discussions, participants shared their experiences with the internal control reporting requirements.

http://www.networkworld.com/news/2006/051106-sox-costs.html

“Victims are protected by federal law from having to pay the fraudulent charges, so the loss is primarily of time,” says Beth Givens, founder of the nonprofit Privacy Rights Clearinghouse.

Attorneys at the FTC are still working out exactly which losses will be covered.

One qualified expense: the cost of credit monitoring for victims who discovered the fraud before ChoicePoint notified them of the breach and offered free credit monitoring.

http://www.csoonline.com/read/040106/penalty.html

One bill, sponsored by Massachusetts Democrat Edward Markey, would require the FTC to make new rules limiting the sale and purchase of those identifiers, with exceptions for law enforcement, public health, certain emergency situations and selected research projects.

Another measure, sponsored by Florida Republican Clay Shaw, would restrict the display of SSNs on credit reports and on various government-issued documents and identification tags.

Several federal laws, including the Fair Credit Reporting Act and the Health Insurance Portability and Accountability Act, better known as HIPAA, also include restrictions on use and disclosure of the identifiers.

http://news.com.com/Congress+may+slap+restrictions+on+SSN+use/2100-7348_3-6071441.html?tag=nefd.top

The bills differ in several ways, including varying requirements about when a breached company should notify customers and whether consumers should be able to freeze their credit reports following a breach. Beyond the confusion about the differences in the bills, five congressional committees have claimed jurisdiction over some of the data breach bills.

Two data breach notification bills have passed through Senate committees and are awaiting action on the Senate floor, and two other bills are awaiting action on the House floor.

Dianne Feinstein, a California Democrat and early advocate for a national data breach notification law, said he’s still hopeful a law will get through Congress this year, but others are less optimistic.

Both the House and the Senate have targeted Oct. 6 to adjourn for the year, giving lawmakers about a month to campaign for the November general elections.

http://www2.csoonline.com/blog_view.html?CID=20859