Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Strict liability for data breaches?
Mark Rasch, 2006-02-20

A recent case involving a stolen laptop containing 550,000 people's full credit information sheds new night on what "reasonable" protections a company must make to secure its customer data - and what customers need to prove in order to sue for damages.

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
Strict liability for data breaches? 2006-02-22
Anonymous
About encryption:
If it's encrypted and stored on a laptop, isn't it likely that the decryption mechanism is also on the laptop?

The key and data must be separated for encryption to be useful. Ideally this would be the case, but I see requirements all the time to encrypt data stored in databases...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus