Data Privacy Monitor
Commentary on Data Privacy & Information Security Subjects
Home > Cybersecurity > SEC To Issue Stronger Cybersecurity Guidance?
SEC To Issue Stronger Cybersecurity Guidance?
By Robert Oestreicher on August 15, 2013 Posted in Cybersecurity, Data Breach Notification Laws
In February we wrote about whether Facebook's IPO would set the tone under the SEC's then-relatively new cybersecurity disclosure guidance. In subsequent months, it has become apparent that this guidance is still not yielding the level of disclosure on cybersecurity matters that regulators want. This is especially true with respect to the disclosure of past incidents of data breach.
Two recent examples of high profile breaches that did not show up in SEC disclosures:
A well-known, large online retailer said nothing in its latest annual report about an online theft of customer data that took place earlier this year. When the SEC followed-up to ask why the incident had not been disclosed, the retailer asserted that disclosure was not required because the incident did not have a material impact on its business.
A highly popular social networking website similarly chose not to file a report with the SEC regarding a breach in June that exposed more than 6 million customer passwords.
Accordingly, new legislation is currently being debated in the Senate, which would require the SEC to review its original guidance and decide whether it should be updated or even made compulsory (i.e., issued as a formal guideline). Such new guidance, in whatever form it takes, would likely force reporting companies to make disclosures regarding cybersecurity, specifically past incidents of data breach, that they are not making under the current guidance regime.
Tags: cybersecurity, data breach notification law, data breaches, SEC
Breach Notification Law Interactive Map
EU GDPR Data Breach Notification Resource Map
2019 BakerHostetler Data Security Incident Response Report
Topics Select Category Advertising Automotive Industry Behavioral Advertising Big Data Biometrics Blockchain Breach Notification CCPA Children's Privacy Cloud Computing Consumer Data Cybersecurity Data Breach Notification Laws Data Breaches Data Security Incident Response Enforcement EU-U.S. Privacy Shield Framework Events Federal Legislation Financial Privacy Forensics GDPR Geolocation HHS HIPAA/HITECH Identity Theft Incident Response Information Governance Information Security Infrastructure International Privacy Law Internet of Things Marketing Medical Privacy Mobile Privacy News Online Privacy Payment Card Industry Phishing Privacy Class Actions Privacy Litigation Ransomware Retail Industry Risk Assessments Social Media State Legislation Telephone Consumer Protection Act Virtual Currency Weekly Privacy Rewind Workplace Privacy
Archives Select Month January 2020 December 2019 November 2019 October 2019 September 2019 July 2019 June 2019 May 2019 April 2019 March 2019 February 2019 January 2019 December 2018 November 2018 October 2018 September 2018 August 2018 July 2018 June 2018 May 2018 April 2018 March 2018 February 2018 January 2018 December 2017 November 2017 October 2017 September 2017 August 2017 July 2017 June 2017 May 2017 April 2017 March 2017 February 2017 January 2017 December 2016 November 2016 October 2016 September 2016 August 2016 July 2016 June 2016 May 2016 April 2016 March 2016 February 2016 January 2016 December 2015 November 2015 October 2015 September 2015 August 2015 July 2015 June 2015 May 2015 April 2015 March 2015 February 2015 January 2015 December 2014 November 2014 October 2014 September 2014 August 2014 July 2014 June 2014 May 2014 April 2014 March 2014 February 2014 January 2014 December 2013 November 2013 October 2013 September 2013 August 2013 July 2013 June 2013 May 2013 April 2013 March 2013 February 2013 January 2013 December 2012 November 2012 October 2012 September 2012 August 2012 July 2012 June 2012 May 2012 April 2012 March 2012 February 2012 January 2012 December 2011 November 2011 October 2011 September 2011 August 2011 July 2011 June 2011 May 2011 April 2011 March 2011 February 2011 January 2011 December 2010 November 2010 October 2010 September 2010
BakerHostetler Blogs
AD-ttorneys Law Blog
Antitrust Advocate
The Blockchain Monitor
Class Action Lawsuit Defense
Copyright, Content, and Platforms
Discovery Advocate
Employment Class Action Blog
Employment Law Spotlight
Health Law Update
IP Intelligence Report
Ohio Clock
WealthDirector
Everything Data!
California AG Press Release Emphasizes CCPA's Jan. 1 Effective Date and Data Broker Registry, Provides No Update on Draft Regulations
Steps to Develop a Mature Third-Party Risk Management Program With High-Risk Third Parties
Cybersecurity Remains a Top SEC Examination Priority in the New Decade
Hoping for a New Year's Resolution: Clarity on the Sale of Personal Information of California Minors
Atlanta,
Cincinnati,
Cleveland,
Columbus,
Costa Mesa,
Philadelphia,
Seattle,
Service Terms |
Infringements |
About BakerHostetler
Recognized as one of the top firms for client service, BakerHostetler is a leading national law firm that helps clients around the world address their most complex and critical business and regulatory issues. With six core national practice groups — Business, Digital Assets and Data Management, Intellectual Property, Labor and Employment, Litigation, and Tax — the firm has nearly 1,000 lawyers located coast to coast. For more information, visit bakerlaw.com.
Copyright © 2020 Baker & Hostetler LLP. All Rights Reserved.
Strategy, design, marketing & support by LexBlog