New EU Rule To Likely Force U.S. Retailers To Disclose U.S. Data Breaches Immediately
Written by Frank HayesJune 23rd, 2011
The European Union will soon require all companies doing business in Europe to notify customers "as soon as they become aware" of a data breach. For U.S. retailers that move will likely force global notification if a retailer has any European customers, because there won't be time to determine who was hit or what was taken. Given the lack of time to positively rule out a Euro impact, retailers will have to just disclose.
That may be an inevitable consequence of globe-spanning E-Commerce. Here's another: Those stricter, faster breach-notification requirements will also hit U.S. retailers that have handed off European order-handling to third parties and even retailers that don't officially serve European customers at all. The less connection a retailer thinks it has with European customers, the more of a mess it's likely to be.
This Story Is Only Available For Premium Subscribers. Click Or Login In Below To Read The Rest Of This Story.
Already a Subscriber? Login Here
Pages: 1 2
Leave a Reply
Readers, specifically those who want to comment on a story:
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
I have strong reservations about the 'individual' certification and posting of that information for merchants. Can you imagine the potential employee poaching that might occur? The implications when competitors can look up how many are certified with each of their competitors? 
-Christine
