3 ms·
Two things can be true. A company or service (sole proprietorship/lifestyle project can be hacked just as easily as a massive C corp) can be liable for negligen
by throwaway5752 8y ago
Two things can be true. A company or service (sole proprietorship/lifestyle project can be hacked just as easily as a massive C corp) can be liable for negligence. But I'm emphasizing that one should never lose sight of who perpetrates and benefits from the crime. That would be the actual criminals/intelligence services who steal (and perhaps sell) the data.
- darkpuma 8y agoRealistically consumers will only be protected once these corporations start facing severe legal penalties whenever their negligence allows them to get hacked. Nobody is interested in letting the hackers off the hook, so your concern is misplaced. But you'll never protect consumers by focusing on the hackers, that just isn't practical. > " benefits from the crime." These corporations are benefiting from their negligence every day when they save money by being negligent with security and facing no real consequences for it.
- ljm 8y agoPenalties are too reactive. Regulation would be more proactive. A huge corporation will mostly see a fine as a cost of doing business. It won't work when you're looking at negligence, or security, because you can hedge all of your bets on never being found out, or otherwise only being found out so far in the future that the negligence has already paid for itself. Regulating the storage of sensitive information, same as you have with HIPAA and GDPR, presents a much stronger case for being more careful up front. You're no longer talking about negligence: the expectation for how you handle sensitive info is made clear right from the start, and you can treat egregious violations (like storing passport numbers alongside other account details like a physical address without securing the system) as malicious.