Who You Gonna Call: The Quest for a National Data Breach Reporting Law
summary
Congress is still debating a single federal breach-reporting law while the current landscape remains a 50 state + 4 territorial patchwork and Europe uses GDPR plus the NIS Directive short-time window for critical infrastructure. SolarWinds forces the issue after roughly 18,000 systems were exposed and FireEye’s quick voluntary report shows the value of prompt sharing; proposals include vendor reporting via procurement, Ohio-style safe harbors, and DOJ/FBI/SISA triage to turn reports into preventative action.
AI-written summary · about
chapters (22)
- 0:00Intro
- 4:47Federal Government Perspective
- 9:57SolarWinds Response
- 13:32Reporting Matters
- 14:52Incentives
- 15:46National security concerns
- 19:15Increased desire to talk to law enforcement
- 22:24New legislation
- 25:04Private sector perspective
- 27:10Lessons from the European model
- 28:07Reporting isnt just a black hole
- 29:36Public reports
- 31:02Innovation
- 32:14Enforcement
- 34:15Reporting
- 36:24Too Much Information
- 38:22Executive Order
- 40:46Privacy Concerns
- 42:53Liability
- 45:51Final Thoughts
- 48:05Next Steps
- 49:38Takeaways
related talks
55mCybersecurity as Realpolitik
01h 09mAligning Cybersecurity Information Sharing with the European Data Protection Framework
01h 12mSecuring cyber critical infrastructure.
58mPanel Discussion - The Risks of Requiring Premature Vulnerability Disclosures
47mYou lost data, unfortunately… Who will knock on your door and why
15mCybersecurity as a National Imperative
50mCyber Invisibility: Developing a Security Incident Notification Regime
22mThe Data Breach vs The Ethics Breach: How to Prepare for Both