From: blitz (blitzstrikenet.kicks-ass.net)
Date: Wed Feb 01 2006 - 21:32:51 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

NY just enacted legislation to that effect.

At 20:02 2/1/2006, you wrote:

>It was a great idea to start this list!
>
>Maybe someone can help me.
>I have been looking for a complete list of security breach disclosures.
>While its nice to have different lists of high profile disclosures
>what would be interesting would be find out how many total disclosures
>and the distributions of size and type. The SB-1386 law in California
>requires companies to contact customers affected by breaches. I checked
>with the California Attorney General's Office and there are no government
>records being kept there since companies are not required to contact any
>government entity. The papers report the high profile breaches -- basing
>any analysis on the media coverage would be skewed.
>
>Are there any states require public reporting of breaches?
>
>Since other states are modeling security breach laws after
>California's SB 1386 it would be great if somehow there could be a public
>reporting element added to these laws so data on all breaches can be
>collected and analyzed for fixing the right problems.
>
>Cheers! - Bill Yurcik/NCSA University of Illinois
> <byurcikncsa.uiuc.edu>
>
>
>_______________________________________________
>Dataloss mailing list
>Datalossattrition.org
>https://attrition.org/mailman/listinfo/dataloss

_______________________________________________
Dataloss mailing list
Datalossattrition.org
https://attrition.org/mailman/listinfo/dataloss

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]