3 ms·
Make a law. I don't think there are actual laws in place that hold companies liable when stuff like this happens. I don't even think they are required to have r
by dkarapetyan 12y ago
Make a law. I don't think there are actual laws in place that hold companies liable when stuff like this happens. I don't even think they are required to have regular security audits.
- christogreeff 12y agoNot sure about the US laws, but in South Africa we have the Protection of Personal Information Act (Popi) and it became law on November 26 2013. "Popi essentially regulates how anyone who processes personal information must handle, keep and secure that information. Personal Information broadly means any information relating to an identifiable, living natural person or juristic person (companies, CC’s etc.) and includes, but is not limited to: contact details: email, telephone, address etc. demographic information: age, sex, race, birth date, ethnicity etc. history: employment, financial, educational, criminal, medical history biometric information: blood type etc. opinions of and about the person private correspondence etc."
- Cthulhu_ 12y agoSame in NL; I'm not sure about the implementation details of the law though. At the very least, all personal data needs to be transmitted over HTTPS; I'm not sure if the law makes demands of back-end storage though. It probably doesn't cover passwords.