FTC Takes action against Drizly and CEO following security breaches

Re:FTC Takes action against Drizly and CEO following securit... by jnorthrop on Tuesday October 25, 2022 @03:48PM (#33335271)

There is this condition

> Recognizing that reality, the Commission’s proposed order will follow Rellas even if he leaves Drizly. Specifically, Rellas will be required to implement an information security program at future companies if he moves to a business collecting consumer information

I'm not aware of any other decree following the CEO to other companies.

[ Parent | on HN ]

Re:FTC Takes action against Drizly and CEO following securit... by fragmede on Tuesday October 25, 2022 @03:52PM (#33335320)

That's an interesting thing to hang around his neck. You'd hope all companies like that (25k+ customers) already have an information security program though. Maybe Relias can take it as a selling point and has a future as an infosec CEO?

[ Parent | on HN ]

Re:FTC Takes action against Drizly and CEO following securit... by philip1209 on Tuesday October 25, 2022 @05:27PM (#33336393)

Interesting - as cybersecurity insurance becomes more popular, I'm curious how orders like this will affect that. Maybe there will be a new checkbox on insurance forms saying "I'm not personally sanctioned by the FTC for information security lapses"

[ Parent | on HN ]