Just two years ago, privacy and security laws were limited. Today the number of laws is staggering, with many states enacting legislation that requires data security, as well as consumer notice when breaches occur. Moreover, the federal government is, for the first time, imposing a generalized duty to establish information security via the FTC Act. Compliance with these laws, says Andrew B. Serwin, is not only a legal reality but also a business one, as recent data security incidents demonstrate
|