Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Cleaning Up Disclosure
Mark Rasch, 2005-04-11

A new federal law requires all U.S. financial institutions to notify their customers when a sensitive database breach has occurred. Newly proposed state laws may go even further.

Comments Mode:
Cleaning Up Disclosure 2005-04-11
K. Huyser (1 replies)
"[...]notify any resident of the United States[...]"

So, As a non-resident of the US I'm screwed if and when *my* data is compromised. Companies don't have to notify me, unlike their US clients.

Why not amend the law to take the "resident of the United States" out and everybody in the world who deals with US companies might feel a little safer.

Or should we read the prosposed law as "we only care about US residents and you lousy foreigners can go screw themselves when US companies foul up"?

I think companies --anywhere in the world-- have a moral obligation to warn their customers --anywhere in the world-- of security breaches.
It should be made into legal obligation, all over the world.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/316/31343#31343
Cleaning Up Disclosure 2005-04-12
Anonymous
The rise of Massive Class Action Lawsuits 2005-04-12
Anonymous (1 replies)
Cleaning Up Disclosure 2005-04-15
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus