From: FierceGovernmentIT
By David Perera
The Federal Trade Commission needs “more tools” to deter private sector consumer data breaches, said Jessica Rich, director of the agency’s bureau of consumer protection, during a Feb. 3 Senate hearing.
The FTC today has authority to bring data-breach related actions only if a company engaged in deceptive or unfair practices, such as by wrongly asserting or implying high levels of data protection.
“We use our deception authority to look at not just what’s stated in the privacy policy but what the company may claim in the context of its interaction with consumers, including implied claims such as a seal,” Rich told a Senate Banking, Housing and Urban Affairs subcommittee.
Leave a Reply