Toward Better Privacy, Data Breach Laws
Summary: President Obama outlined a proposal requiring companies to notify customers of a data breach within 30 days of discovery, intended to unify nearly four dozen disparate state disclosure laws into a single federal standard. The piece notes that seven states already have shorter 'shot-clock' deadlines - Connecticut requires insurers to notify within five days, and California has similar rules for health providers - while at least 14 states and the District of Columbia let affected consumers sue for damages.
Why it matters: Whether the federal law sets a floor or a ceiling decides the outcome: a baseline that lets states keep stronger rules preserves Connecticut's five-day clock and the 14 states' private right of action, while preemption would collapse them into one weaker standard.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026