FTC Sends Message With $15 Million ChoicePoint Fine: Protect Customer Data
But is it enough? The $10 million civil penalty portion is the highest fine in FTC history, but paltry compared to the $50 million fine McAfee was ordered to pay the Securities and Exchange Commission earlier this month for allegedly overstating earnings statements.
Fifteen million dollars in fines, plus regular data security audits and mandated changes to business practices. That's how ChoicePoint Inc. will have to settle charges that its security and record-handling policies were illegal and violated consumer privacy rights when it unwittingly sold 163,000 customer records to fraudsters. And it's a message the Federal Trade Commission hopes to send to companies that don't keep adequate stock of their customer data.
It may seem paltry next to the $50 million fine McAfee was ordered to pay the Securities and Exchange Commission earlier this month for allegedly heavily overstating earnings statements or the $11.2 billion lawsuit against a Florida spammer several weeks ago. But the $15 million in fines is still a lot of money, and the $10 million civil penalty portion of that is the largest single fine in FTC history. In comparison, the state of California last year fined a division of Kaiser Permanente $200,000 for a breach that affected only 150 customers. Some states have fines built into their own data security laws. For example, in Florida, a 2005 law makes companies pay $1,000 for each day they fail to report customer data breaches.
Data breaches like ChoicePoint's and the CardSystems Solutions thievery of 40 million credit card numbers polluted the landscape last year, and the trend has continued anew in January. Earlier this month, UPS lost a tape containing information on 90,000 People's Bank customers in Connecticut. Yesterday, investment advisory house Ameriprise Financial announced that lists containing personal data—including account and Social Security numbers—of 226,000 customers and employees had been stolen in the form of an unencrypted personal laptop.
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.
Digital Transformation Myths & TruthsTransformation is on every IT organization's to-do list, but effectively transforming IT means a major shift in technology as well as business models and culture. In this IT Trend Report, we examine some of the misconceptions of digital transformation and look at steps you can take to succeed technically and culturally.