Sunday, October 18, 2015

Cybersecurity Bill of Rights, Oct 14 adoption

New Bill of Rights to protect your personal information and calls for breach notification with 60 days from insurance company.
  • Know all your personal information held and the agent/business they contract with
  • Privacy policy requires to be on website and hard copy; as well as consumer options for their data
  • Reasonable protection for unauthorized data from company, agencies and any business with your data
  • Unauthorized access of data is a security breach which will require: first-class written notification or email sent within 60 days, description of breach and steps to protect from fraud, action company and agents has taken to protect, contact information for the 3 credit bureaus, and contact information of company/agent involved in the breach
  • Your rights include: 90-day initial fraud alert/credit report, 7 year extended fraud alert, credit freeze, free copy of credit report, get fraudulent information regarding breach as well as information related to identity theft, dispute fraudulent information on report, and stop creditors/deb collectors from report fraudulent accounts related to breach as well as stop contracting you. 

This came of the heel of Anthem’s data breach that exposed 80MM customer records including names, SSN, birthdays, medical ID, and other employment data.  However, the new bill has raised additional questions regarding the extent of rights and protection that might be beyond existing state/federal protection laws.  So, it should go through further scrutiny or further clarification and its effectiveness will be forth telling.

No comments:

Post a Comment