Getting it Right on Data Security and Breach Notification Legislation in the 114th Congress

Recent high profile data breaches as well as the headline grabbing Sony cyberattack from late 2014 are the latest examples that highlight the ongoing and serious cyber threats that face Americans and businesses. The purpose of this hearing is to examine the merits of the Federal data security standard and the need for preemptive and uniform Federal data breach notification. We all know we live in a digital world where consumers have embraced online products and services. Kansans, my folks at home, they know they can make purchases, determine their credit score, conduct banking and examine health care plans all from a mobile phone, computer, or a tablet. That is true of consumers across the country and increasingly around the globe. This digital economy creates new risks. As of 2015, the Privacy Rights Clearinghouse has estimated more than 4,400 breaches involving more than 932 million records that have been made public since 2005. In a world where one bad actor can battle against a team of highly trained experts, we face challenges to make certain that consumers are protected and that businesses have the tools and incentives to protect their customers from harm.