Obama Breach Proposal Draws Criticism From Many Camps
NEWS ANALYSIS: Many players in the security and privacy space welcome White House attention to the problem of data breaches, but few agree with it completely.The latest proposal from President Barack Obama regarding legislation that the White House plans to introduce during the current session of Congress is generally welcomed by observers, but just about everyone with an oar in that water wishes it had been somehow different. Predictably, the Republication-led Congress wants to use its own bill (which varies, depending on whether it's in the House or Senate) while a number of states have already implemented laws on security breaches that reflect their views as to what's best for their residents. The proposed legislation is actually part of a continuing effort to get Congress to pass meaningful legislation that would set a national standard for how companies respond to the loss of customer confidential data as a result of a breach. For its part, Congress has been dealing with legislation aimed at similar goals for a couple of years, but to date has produced no actual laws covering the issue. The closest Congress came was in the most recent term when the House passed a law that was never addressed in the Senate. This year, with the House and Senate both being controlled by the same party, there's always the chance that some type of legislation might make it through. Whether any such legislation resembles what the White House is proposing remains to be seen.
During the president's speech at the Federal Trade Commission headquarters, on Jan. 12, he noted that current rules are being enforced by the states, and that means that there's a wealth of differing rules. The proposed national rule that's being floated would require companies that have been breached to notify anyone who is affected within 30 days. But the proposal would also invalidate state laws that are stricter than the federal standard, including rules that call for breach notifications in less than 30 days.