The bill, introduced Thursday and called the Personal Data Protection and Breach Accountability Act of 2011, aims to protect a citizens’ privacy and online security.
Only companies that store data online for over 10,000 people would be affected by the bill. If passed, the bill would require those companies to follow a set of guidelines to ensure all the personal data they store is sufficiently protected. Those that don’t follow the guidelines would be at risk of racking up hefty fines from the government.
Should the bill pass, customers who entrust their personal information online would be able to sue companies in charge of that data in the event of a preventable security breach.
I don’t know that a bill like this is necessary. Companies are already suffer plenty of losses – both money and credibility – when data breaches occur. Ultimately if a company doesn’t care about its consumers’ personal privacy, it likely won’t stay in business long.