Liability for Data Breaches are Minimal
vandon submitted a Security Focus bit about
liability and identity theft. The article talks about a contractor's laptop containing a half a million records of private student loan information being stolen. The court ruled that since "Reasonable" precautions had been taken, the loan company need not be held strictly liable for their customers damages.
"Apparently the mere existence of some type of policy -- regardless of what that policy actually is -- is now enough for companies to eschew any liability for leaking consumers' data."
It's as if a million Lawyers cried out and then were suddenly silenced.
C.
"Doctor, it's not the voices I hear in MY head, but the voices I hear in YOUR head that really frighten me."
It works for Apple.
is a failure to follow policy.
I would've guessed the number one reason companies loosed lawsuits was to win them. I'd venture that some companies policy, indeed the basis of their existance, is centered around loosing lawsuits.
https://www.eff.org/https-everywhere