The Canadian Press - ONLINE EDITION

Attorney General says Congress should require quick notification to consumers on data breaches

  • Print

WASHINGTON - Attorney General Eric Holder is urging Congress to require businesses to quickly alert consumers and law enforcement agencies in the wake of significant data breaches like the ones at discount retailer Target and at Neiman Marcus.

In a video posted Monday on the Justice Department's website, Holder called on Congress to create a national standard for notifying consumers whose information may have been compromised, so people can protect themselves from identity theft.

Holder said congressional action would let law enforcement agencies investigate such crimes thoroughly and would hold companies accountable when they fail to safeguard sensitive information. Holder said there should be exemptions for harmless breaches to avoid placing unnecessary burdens on businesses that act responsibly.

The comments followed a Feb. 4 Senate Judiciary Committee hearing at which executives from Target and Neiman Marcus were pressed about how quickly they notified customers of breaches.

The Justice Department told Target executives on Dec. 12 of suspicious activity involving payment cards and the company started an investigation, removed malware and publicly announced the data theft on Dec. 19, said John Mulligan, executive vice-president and chief financial officer at the No. 2 U.S. retailer.

A processing firm told luxury retailer Neiman Marcus of a problem on Dec. 13, the company's investigators made a report on Jan. 2 and customers were notified on Jan. 10, said Michael Kingston, senior vice-president and chief information officer at Neiman Marcus Group Inc.

Legislation in line with Holder's comments, advanced by Senate Judiciary Committee chairman Patrick Leahy, D-Vt., would establish a national standard for companies to follow in notifying consumers after a data breach. The White House has been calling for such a law for several years.

One White House proposal would require companies that collect information about more than 10,000 people over 12 months to notify any individual whose sensitive information is improperly accessed or stolen "unless there is no reasonable risk of harm or fraud." The proposal also would require notice to the government and the news media if the breach affects 5,000 or more people.

Earlier this month, the administration released a 39-page guide urging vital industries like transportation, financial, health care and energy to assess their risk to cyberattacks and take action to close gaps. The Homeland Security Department also launched a voluntary program for businesses to get help at no cost from its cybersecurity experts about ways to counter threats.

States, too, have been active on the cybersecurity front. Forty-six states and the District of Columbia have enacted legislation requiring private or government entities to notify individuals of security breaches of information, according to the National Conference of State Legislatures.

Fact Check

Fact Check

Have you found an error, or know of something we’ve missed in one of our stories?
Please use the form below and let us know.

* Required
  • Please post the headline of the story or the title of the video with the error.

  • Please post exactly what was wrong with the story.

  • Please indicate your source for the correct information.

  • Yes

    No

  • This will only be used to contact you if we have a question about your submission, it will not be used to identify you or be published.

  • Cancel

Having problems with the form?

Contact Us Directly
  • Print

You can comment on most stories on winnipegfreepress.com. You can also agree or disagree with other comments. All you need to do is be a Winnipeg Free Press print or e-edition subscriber to join the conversation and give your feedback.

You can comment on most stories on winnipegfreepress.com. You can also agree or disagree with other comments. All you need to do is be a Winnipeg Free Press print or e-edition subscriber to join the conversation and give your feedback.

Have Your Say

New to commenting? Check out our Frequently Asked Questions.

Have Your Say

Comments are open to Winnipeg Free Press print or e-edition subscribers only. why?

Have Your Say

Comments are open to Winnipeg Free Press Subscribers only. why?

The Winnipeg Free Press does not necessarily endorse any of the views posted. By submitting your comment, you agree to our Terms and Conditions. These terms were revised effective April 16, 2010.

letters

Make text: Larger | Smaller

LATEST VIDEO

In the Key of Bart: Peladeau-Re-Mi

View more like this

Photo Store Gallery

  • A  young goose stuffed with bread from  St Vital park passers-by takes a nap in the shade Thursday near lunch  –see Bryksa’s 30 day goose challenge Day 29-June 28, 2012   (JOE BRYKSA / WINNIPEG FREE PRESS)
  • Marc Gallant / Winnipeg Free Press. Local- WINTER FILE. Snowboarder at Stony Mountain Ski Hill. November 14, 2006.

View More Gallery Photos

Poll

Do you think Manitoba needs stronger regulations for temporary workers?

View Results

View Related Story

Ads by Google