Hearing Witnesses Warn Against Overreaching on Breach Notifications

At yesterday’s hearing, witnesses not representing financial institutions told members of the Senate Homeland Security Committee that new legislations should not include a strict timeline for data breach notifications and should instead use a “reasonable man” standard. They recommended that the triggering event be limited to situations where data is actually stolen and not just events where a system has been infiltrated. [1/29/15]