3 ms·
I propose a way to improve cybersecurity: FINE companies who loose sensitive customer data to hackers. Fines can be calculated according to the "breach severity
by readhn 7y ago
I propose a way to improve cybersecurity: FINE companies who loose sensitive customer data to hackers. Fines can be calculated according to the "breach severity grid" which is based on the type of data that is lost. For example:
1. Personal address, DOB - $15.
2. Each social security $20.
3. Driver license number $25.
4. Bank account numbers $30.
etc.
So a loss of 4.9 million social security numbers, DOB and addresses would generate a fine of $171,500,000
Problem solved!
Now, the company will think 100x times BEFORE collecting consumer data if they can actually PROTECT IT. Build robust security FIRST!
- Sohcahtoa82 7y agoI would add passwords to the list of fines with growing penalties based on how the passwords were stored. Unique salt per user hash < shared salt with user hash < no salt but using strong hash < no salt and a weak algorithm like MD5 or SHA-1 < plaintext
- readhn 7y agogreat suggestion! loosing data that is well protected is one things, but loosing plain text personal info is totally different matter and should be punished more.