Nationwide data breach bill clears a hurdle

The Data Accountability and Trust Act (DATA) was approved by the U.S. House Energy and Commerce Committee last week and could soon be cleared by the House of Representatives. The bill, if passed, would mean all companies have to inform customers of security breaches that affect their personal data.

According to the Federal Trade Commission, ID theft cost American consumers $5 billion and businesses $48 billion last year. The bill would allow the FTC to enforce standards on keeping data, and make companies appoint a head of security who would produce best practice and audits up to five years after an event. Under the proposals, if a breach does occur, a company must notify any customers concerned and also tell the FTC, which can then demand an audit.

Dan Ilett of Silicon.com reported from London.

[Michael Vasovski]

I wonder...

Does anyone know if this includes the SSA. I mean if "all companies have to inform customers of security breaches that affect their personal data", shouldn't this also include people that are using our SSN's to gain employment, etc.? Probably not, since they aren't considered a company. Too bad. I wish our government was stronger.