Just two years ago, the number of privacy and security laws was limited and applied only to companies in certain industries, or those that had international operations. Today the number of laws is staggering. Many states have stepped into the breach and enacted legislation requiring data security, as well as notice to consumers when security breaches occur. Moreover, although there is no federal law that generally requires information security, recent Federal Trade Commission actions indicate that the FTC is, for the first time, imposing a generalized duty to establish information security via the Federal Trade Commission Act.

Compliance with these laws is not only a legal reality, but also a business one, as the frequent and well-publicized data security incidents demonstrate. New notice laws require companies to advise customers of the high-profile data security incidents that frequently make headlines. Companies must now deal with increasingly complex requirements that are not consistent across all states. The price of failure can be high — including significant penalties as well as unfavorable press coverage.

This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.

To view this content, please continue to their sites.

Not a Lexis Subscriber?
Subscribe Now

Not a Bloomberg Law Subscriber?
Subscribe Now

Why am I seeing this?

LexisNexis® and Bloomberg Law are third party online distributors of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® and Bloomberg Law customers are able to access and use ALM's content, including content from the National Law Journal, The American Lawyer, Legaltech News, The New York Law Journal, and Corporate Counsel, as well as other sources of legal information.

For questions call 1-877-256-2472 or contact us at [email protected]