3 ms·

> No rules or laws that require it It will just be FTC knocking on your door…

• malfist 3y ago
  The FTC will absolutely not knock on your door if you expose users's SSN to the internet.
• jacobr1 3y ago
  Or the SEC, because one the breach/incident is public, the share price drops and failure to have disclosed those factors prior constitutes "securities fraud." Increasingly this it the default method of corporate regulation.
• adrr 3y ago
  FTC will come knocking at your door even if you do pass an external audit and have Soc2/soc1/iso certification. Equifax is an example.
  • stackskipton 3y ago
    Who will promptly slap you on the wrist, wag their finger at you and send you on your way.