California State Senator Joe Simitian has introduced new prescription designed to tighten data breach notification requirements, forcing businesses to provide more dossier about any data that has been leaked in addition to notifying state authorities. What was not appear in the ruling was imposed restitution requirements for data breach victims, and as it should be to Simitian are not likely to be for quite some time. "Instead, the next focus of legislation, he said, would likely be on who should bear the cost of sending out notifications to consumers. For example, should a credit card processing company that bio a breach be answerable for the cost of notifying bank customers? When retailer TJX discovered in 2006 that hackers had accessed credit and debit card numbers passing through its network, banks were left notifying the customers, then had to sue TJX to get reparation for those costs. Heartland Payment Systems, which old a breach of credit and debit card numbers in January, has of late been sued by banks to recover their breach notification costs."

Read more of this story at Slashdot.

More: - The rest...

Mark