In an upcoming article for a major trade magazine related to payment security, EPX COO and Chief Security Office Matt Ornce makes some predictions about increased legislation for the payment card industry in 2010.
Ornce asks if 2010 is the year for state level breach notification laws to be aggregated into federal law. He says that there could be some welcome legislation for those organizations that unfortunately need to struggle with the 46 different state laws. Such legislation could also help streamline the time-sensitive notification process for breached entities. Beyond the financial fraud perpetrated for personal gain, the use of breached cardholder data as a funding source for terrorist activities has been clearly established by the Criminal Division of the Department of Justice, the FBI, the U.S. Secret Service and others, providing a clear impetus for federal regulation of cardholder data security.
It seems that Ornce’s prognostications are coming true.
Recently, the U.S. Senate Judiciary Committee approved two bills (the Personal Data Privacy and Security Act and the Data Breach Notification Act) that require organizations who suffer data breaches to report them to potential victims.
The Data Breach Notification Act would require U.S. agencies and businesses involved in interstate commerce to report data breaches to victims whose personal information “has been, or is reasonably believed to have been, accessed, or acquired.” The bill also requires businesses to report large data breaches to the U.S. Secret Service.
The Personal Data Privacy and Security Act would also require that breached organizations give notice to potential victims and authorities. The Act would increase penalties for data theft and provide people the ability to access and correct personal data held by commercial data brokers.
While it doesn’t eliminate the state laws, it’s the first step solidly in the direction of replacing those laws with a federal standard.
EPX Protects Payment Data During the Transaction Lifecycle, But Consumers Must Safeguard their Credit Cards and Debit Cards at All Times
Tuesday, January 12th, 2010Electronic Payment Exchange’s industry leading tokenization and encryption technologies protect payment data throughout the transaction lifecycle. Independent of EPX however, identity theft occurs constantly as a result of insecure consumer practices before any card data enters the transaction lifecyle. Therefore, it is important for credit and debit card users to practice high levels of safety when performing transactions.
Below is a list of important safety tips for credit and debit card users to follow:
If credit and debit card users would perform at least half of these suggested security tips, the number of identity thefts and fraudulent transactions happening each day would be reduced.
For additional information about identity theft, click here.
Tags: credit card, credit card processing, credit card processor, data breach, data breach victim, data theft, debit card, debit card processing, debit card processor, Electronic Payment Exchange, encryption, EPX, identity theft, payment processing, tokenization
Posted in EPX Commentary | No Comments »