There are two pieces of news to report in terms of various consumer data protection acts at the state and national levels.
This month, President Bush signed into law a bill that will make it easier for prosecutors to go after cybercriminals, and for identity theft victims to be compensated. The Identity Theft Enforcement and Restitution Act of 2008 [HR 5938], which passed the Senate in July, would remove the $5000 damages floor that was previously required for prosecutors to charge individuals under the federal cybercrime laws.
Identity Theft Enforcement and Restitution Act (HR 5938) would:
- Give identity theft victims the ability to seek restitution
- Ensure cyber criminals posing as businesses can be prosecuted
- Make it a felony to employ spyware or keyloggers that damage 10+ computers
- Extend cybercrime definitions to include cyberextortion cases
- Allow prosecution when cybercriminal and victim live in the same state
In other legislative news, the Massachusetts Office of Consumer Affairs and Business Regulation has released a new set of rules requiring companies to encrypt personal data on laptops and monitor employee access to data. These new rules apply to credit card information and Social Security Numbers. Companies and government agencies are required to comply with the new regulations by January 1, 2009.
In August, Governor Patrick signed an identity theft prevention law that requires the reporting of data breaches to the Office of Consumer Affairs and Business Regulation. Since then, 320 breaches have been reported, affecting 625,365 Massachusetts residents. A report outlining the incidents has been released here [PDF].
Via i’ve been mugged, 2, boston globe, washington post ; Image: clip art
Archive


