Equifax securities fraud class action [pdf]

Re:Equifax securities fraud class action [pdf] by ericmay on Tuesday October 22, 2019 @09:03AM (#21323114)

Right. We do this with accounting firms, and I think we should do it with data security as well. Does it cost money? Sure. But that's the cost of doing business. If you have personal info like this and you profit from it, then you are also responsible for safeguarding it.

[ Parent | on HN ]

Re:Equifax securities fraud class action [pdf] by sailfast on Tuesday October 22, 2019 @09:45AM (#21323512)

Just a quick gut-check: are we sure this is working well with accounting firms?

They're all merging again post-Arthur-Anderson scandal with their services consulting businesses and while there may be controls and training and they're all pretty serious about it (I worked for such a company at one point) it doesn't seem like many folks are getting dinged on violations of late.

I agree that it is worth the cost (as a citizen whose data is being lost) but in the current landscape the companies may argue that it is not, and might be right.

[ Parent | on HN ]

Re:Equifax securities fraud class action [pdf] by pmccarren on Tuesday October 22, 2019 @09:16AM (#21323248)

In being careful to not build an impossible barrier-to-entry, perhaps the requirement becomes active upon certain criteria (e.g. number of users)

[ Parent | on HN ]

Re:Equifax securities fraud class action [pdf] by zonidjan on Tuesday October 22, 2019 @09:20AM (#21323278)

There's already an impossible barrier to entry. The ones that already exist have data on almost every person in the US, and your new upstart doesn't.

[ Parent | on HN ]