Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Fill Baptismal
Dec 15, 2008

PT6A posted:

The civil standard of negligence should be applicable. If I'm operating a business and I leave a bunch of credit card numbers lying around where anyone can see them, it's a crime to break in and steal them, but it's also negligent on my part to store them in an insecure fashion. If I kept them in a cardboard box that says "confidential!" that's still a bit poo poo, but slightly less negligent. If I stored them in a safe, and I didn't leave the key nearby, that's appropriate precaution on my part, even if the thief breaks into the safe.

What is the current law on affirmatively having to secure sensitive information? Are their minimum technical standards or safeguards that have to be employed, or is it a case by case, “if your poo poo gets stolen because your credit card company didn’t secure it enough, sue them and try your luck in court” kind of thing?

An affirmative duty to securely store sensitive information seems like the only legal solution, similar to how some states require you to lock your gun in a safe, but it’s difficult to see how exactly you would legislate that.

Adbot
ADBOT LOVES YOU

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply