California disclosure law has national reach

California disclosure law has national reach
Kevin Poulsen, SecurityFocus 2003-01-06

A new California law requiring companies to notify their customers of computer security breaches applies to any online business that counts Californians as customers, even if the company isn't based in the Golden State.

Colapse all | Post comment

California disclosure law has national reach 2003-01-07
Midridth (1 replies)

This definatly sounds like a good idea seeing as how something of this nature is needed, however just like all new laws this has to be defined better so that the vagueness of it cannot be exploited by either side in a unconstitutional matter.

I also wonder, though, if it will work if the company ...

[ more ] [ reply ]

re: California disclosure law has national reach 2003-01-07
Keydet89 (at) yahoo (dot) com [email concealed] (1 replies)

> by Midridth

>

> I also wonder, though, if it will work if the company is

> based "outside of the golden state."

I think that was pretty clearly covered in the article.

> Just some thaughts.

Perhaps some other "thaughts"[sic] would be this...look at the question of what constitutes "...

[ more ] [ reply ]

re: California disclosure law has national reach 2003-01-08
Anonymous

I completely agree with you...the crux of the matter is truly what constitutes "knowledge". IMHO, the standard should be whether or not the entity should have knowledge of the compromise based upon industry standards and common practices. Companies that fail to review logs (or, even worse, don't l...

[ more ] [ reply ]

California disclosure law has national reach 2003-01-08
Ajay Gupta, CISSP

The law is far reaching and is likely a bit of overkill. However, it is a move in the right direction. I see two primary benefits, both of which are necessary to begin to get a handle on "Internet Security".

Number 1, it encourages reporting cyber breaches to Law Enforcement. I am pretty confi...

[ more ] [ reply ]

California disclosure law has national reach 2003-01-08
Anonymous (2 replies)

It's my understanding that, according to the US Constitution, the authority to regulate interstate commerce lies in the US Congress (Article 1, Section 8- I think. ). Could someone explain how this is Constitutional?

That aside, I think it is a good idea- perhaps the requirement of going public i...

[ more ] [ reply ]

California disclosure law has national reach 2003-01-08
Anonymous

States are allowed to regulate what goes on in their borders. By selling within the borders of california they are working within there borders and liable to their laws. Perhaps you've never heard of DeCSS or a russian company called Elmsoft? ...

[ more ] [ reply ]

Interstate Law 2003-01-09
Ryan C

For an few of the issues of interstate tax, you should read netflix.com. While an unlikely source, the fact that they lend DVDs (which they continue to own) to people in every state requires them to pay the taxes associated with every state. So, if you have any presence within a states borders, yo...

[ more ] [ reply ]

California disclosure law has (inter)national reach 2003-01-09
Robert Turner - UK

Hi

Does anyone know how this would apply to international companies? Such companies would have no (obvious) reason to store SS or DL numbers, but CC numbers may be stored...

I would say that this has wider implications than stated in the article.

Any comments?

Robert

...

[ more ] [ reply ]

California disclosure law has national reach 2003-01-09
Anonymous

I haven't read the text of the law itself, only the synopsis posted here above and the other posts so far. Certain points get my attention.

First, I think there IS a constitutional question here: the regulation of interstate commerce via electronic means hasn't been decided in Congress to my kno...

[ more ] [ reply ]