Bill targets retailers for costs to fix data thefts
520196
Citing the high-tech theft of credit card numbers from Stop &amp; Shop Supermarket Cos., Massachusetts bankers yesterday urged state legislators to force retailers and others who fail to keep card data protected to pay all costs for fixing security breaches.
414095
(InfoWorld) - U.S. lawmakers promised to push ahead legislation aimed at cracking down on pretexting despite some objections from telecom carriers and the U.S. Department of Justice. Nearly all the members of the House of Representatives Energy and Commerce Committee pledged to push the Prevention of Fraudulent Access to Phone Records Act, which would give the U.S. Federal Trade Commission (FTC) authority to file lawsuits against pretexters and the people who hire them. The bill would also require the Federal Communications Commission (FCC) to draw up new rules for telecom carriers to protect private phone records, and it would prevent carriers from sharing customer information with third parties without permission. Despite some concerns about the bill, lawmakers said consumers need protection against pretexting, the practice of posing as a telecom customer to obtain phone records and other private information. "Someone with bad intentions and a few bucks can get a hold of almost anybody's cell phone records," said Representative Fred Upton, a Michigan Republican. President George Bush signed a bill creating criminal penalties for pretexting in January. But proponents of the Prevention of Fraudulent Access to Phone Records Act say the extra protections in the bill are also needed. The Energy and Commerce Committee approved the same bill during the last session of Congress, but the legislation apparently was held up on the House floor because of concerns from federal law enforcement agencies that the bill could slow efforts to get information on terrorism suspects. Lawmakers from both parties complained that they received little explanation about why the bill died last year. Thomas Navin, chief of the FCC's Wireline Bureau, said the Department of Justice was concerned that the FCC would set up rules that consumers are notified too soon after their phone records were accessed by someone else. The DOJ wanted a delay of seven days before consumers were notified, he said. But Representative Ed Markey, a Massachusetts Democrat, said consumers should be notified immediately. "I don't think the Department of Justice should be listened to on that issue," he said. "I think [victims] should be listened to on that issue." Markey pointed to news reports this week saying the FBI may have violated the law and its internal rules while collecting telephone, data, and other personal records through the Patriot Act. "There is still a lack of respect for the law of our country," he said. Beyond the law enforcement concerns, representatives of trade groups the United States Telecom Association and CTIA-The Wireless Association said the bill could prevent them from sharing customer information with third parties that market complementary products. CTIA members don't share customers' personal information with unrelated groups, but the carriers do use third-party vendors to market wireless-related products, said Steve Largent, CTIA's president and CEO. But Representative Joe Barton, a Texas Republican, questioned industry concerns about language in the bill that could require carriers to get opt-in permission from customers to share their personal data. "It seems if we want to protect privacy, we should change this from opt out to opt in," he said.
107396
If a shopkeeper tried to charge $1,000 for a broken computer, you'd probably be outraged. You might even complain to the government.
595002
SEEKONK -- With help from US Secret Service agents, Stop &amp; Shop Supermarket Cos. executives scrambled yesterday to determine how many consumers may have had their credit and debit card data stolen by high-tech thieves who apparently broke into checkout-line card readers and planted the equivalent of bugs to steal information.
124293
There is a ready market for the data lost by the HMRC say computer security experts.
659234
(InfoWorld) - When the U.S. Congress adjourned in the early morning hours Saturday, it left a number of technology-related bills unfinished, including two bills addressingÂ fraudulent access to personal telephone records. Despite pressure from members of the House of Representatives Energy and Commerce Committee, the full House failed to act on the Prevention of Fraudulent Access to Phone Records Act. The law would have allowed the U.S. Federal Trade Commission to seek civil penalties against businesses that obtain personal data under false pretenses. The committee has been looking into privacy concerns related to so-called pretexting since early this year, but the issue came to a head last month, whenÂ Hewlett-Packard revealedÂ it had used questionable investigative techniques in the surveillance of board members, employees, and reporters. With pretexting, private investigators or identity thieves pretend to be customers of mobile phone carriers or other companies in order to gain access to personal records such as call logs. Congress still has more time to act on the pretexting legislation or six related bills this year, however. After a month-plus break allowing lawmakers to focus on the Nov. 7 election, Congress will return for a lame-duck session Nov. 9. Democrats last week complained that the House Republican leadership had held up the pretexting legislation, but Representative Joe Barton, a Texas Republican and Energy and Commerce chairman, said he'd continue to push for the legislation. Congress alsoÂ failed to pass a wide-ranging broadband billÂ that would replace local franchise rules with a national system for telecom providers launching Internet Protocol-based television services in competition with cable TV. And although U.S. President George Bush called on Congress to pass legislation authorizing a controversial National Security Agency (NSA)Â surveillance program, two bills making it easier for the government to conduct surveillance without court-ordered warrants also stalled. One piece of Internet-related legislation did pass early Saturday. The Senate passed a bill providing money for seaport security, and added to the bill was a provision prohibiting U.S. banks and credit-card companies from processing payments to online gambling sites. A group of professional poker players had asked Congress to reject the bill, but a group of House Republicans pushed for the legislation, saying offshore gambling sites were breaking U.S. gambling-control laws. Bush had called for legislation to authorize the NSA program, which has listened in on the electronic communications of U.S. residents without court-ordered warrants, as a way to head off multiple lawsuits targeting the program. He has argued the program is necessary to help keep U.S. residents safe from terrorism. The HouseÂ passed one surveillance bill, but the Senate failed to act. The House bill would allow federal law enforcement officials to spy on U.S. residents for up to 90 days without a court order in the period after a terrorist attack. The Center for Democracy and Technology (CDT), a civil liberties and privacy advocacy group, said it was happy to see the surveillance and broadband bills stall. Republicans supporting the surveillance bill were pushing it as a way to show they were focused on national security during the last weeks of the congressional campaign, said Nancy Libin, a staff counsel at CDT. "Now that they've gone home, I'm not sure what kind of priority it will be when they come back," she said. Several civil liberties groups had opposed the broadband bill as it lacked protections for so-called net neutrality. Net neutrality advocates want a law that would prohibit broadband providers from blocking or slowing service to Web sites offering competing content, and they have successfully halted the Senate version of the broadband bill, despiteÂ heavy lobbying from large broadband providers.
337989
A customer filed a $54 million lawsuit against Best Buy for losing an $1100 laptop she took in for service. The reason, exposure to identity theft.  It's about time vendors were forced to recognize the value of customers' data. I recall how the chief genius at the Apple store in Emeryville complained that they would have to eat the cost of the drive in a deal they made with the manufacturer. Someday they'll have a clue that the data on most drives is worth far more than the hardware, and that their potential liability, if the data ends up in the hands of an identity thief, is also much greater.
576752
Two bills take different approaches toward the tricky concept of how to regulate what happens if a company has a data leak.
321405
Members of the U.S. Congress introduced a flurry of new technology-related bills this week, including two bills that would require companies with data breaches to notify affected customers.
257999
Details of security lapses with motorists' data are expected when MPs get updates on Whitehall data losses.
44883
The Nationwide Building Society is fined Â£980,000 over security breaches following the theft of a laptop.
240857
WASHINGTON - Spyware legislation that would allow fines of up to $3 million for makers of software that steals personal information from a user's computer or highjacks its browser will get a second look after the U.S. Congress failed to pass the legislation in 2004.
80509
Companies, government agencies, schools and other institutions are spending more to protect ever-increasing volumes of personal data such as credit card and Social Security numbers with more sophisticated firewalls and encryption, but the investment often is too little, too late.
104555
Households could be charged per bag of rubbish as part of the government's plans to boost recycling.
470278
'Little chance for success' Victims of Government data loss are being encouraged to buy packs claiming to help them claim compensation. Thousands have paid out, but privacy lawyers have warned that success is very unlikely.â¦
16565
OTTAWA -- More convicted criminals will have to submit DNA samples to the national data bank - including those convicted of possession of child pornography - under newly proposed legislation tabled in the House of Commons yesterday.
168263
Shoppers will pay a premium if re-assured about personal privacy, suggests US study.