Privacy Breach Resources

In recent months, there has been a huge number of reports of database security breaches by identity thieves.

The growing consciousness of the problem has given rise to a debate over the need for laws mandating companies to report breaches in the security of personal information in their possession.

At the moment, Canada does not have any such law but the issue has become hot in the United States:

• Last week, Senator Arlen Specter (Repub.-Pennsylvania) and Senator Patrick Leahy (Dem.-Vermont) introduced the Personal Data Privacy and Security Act of 2005
• The National Conference of State Legislatures has a list of state legislation (in effect or under consideration) requiring notification of consumers when the security of computerized systems containing personal information has been breached
• The Public Interest Research Group (PIRG) has also listed state initiatives in the areas of security freeze laws (which allow consumers to prevent identity theft by freezing their credit reports from access) and breach notification laws
• The beSpacific blog has an extensive ID theft archive