4 ms·
Among the many different things required of the GDPR, CCPA and US state-level data privacy regulations are: 1. Data Breach disclosures 2. Reporting/Public stat
by michaelbuckbee 8y ago
Among the many different things required of the GDPR, CCPA and US state-level data privacy regulations are:
1. Data Breach disclosures
2. Reporting/Public statements if the vulnerability or path that caused the breach has been fixed.
Note, this might seem a little weird (like "of course we've fixed the breach!") but often data breaches aren't detected for _months_ after they occur. There's plenty of companies who didn't know they were breached until they were on HaveIBeenPwned.
It's not NTSB level thoroughness, but I think it's a healthy start in that direction.