On March 18, the FTC Consumer Protection Director testified before the House Energy and Commerce Committee on proposed data security legislation. She testified that the FTC supports the bill's provisions requiring reasonable data security standards for companies, consumer notification of data breaches, and FTC penalties and enforcement against common carriers and nonprofits. However, she criticized the bill's narrow definition of "protected personal information," the failure to address connected device functionality, and the omission of rulemaking authority under the Administrative Procedure Act.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
