INFOSEC: What Is The Legal Standard Of Care?

Abstract

The convenience of conducting personal business in the comfort of one’s home attracts millions of individuals to shop, pay bills, and bank online. In the process, sensitive personal and financial information is disclosed and the exchange of this information creates a risk of identity theft. Providing effective cyber security is an issue with significant implications for companies.  Failure to provide adequate security for consumer information may subject a company to legal action by the Federal Trade Commission (FTC).  Information vulnerability, recent security failures and the standard of care are discussed.