The Federal Communications Commission (FCC) is set to enact new federal data breach reporting rules this week. Legal professionals working within some of the world’s biggest corporations and law firms need to take note, as these rules carry significant implications for business costs and compliance regime adaptation.
The updated FCC rules, which were adopted in December, are geared to add a plethora of new requirements and business costs. A vital change worth noting is the elimination of a mandatory waiting period for reporting and the establishment of several new parameters for telecommunications providers.
The new rules contribute to a growing complexity for businesses: currently, there are more than 50 federal data breach reporting requirements for companies. On top of this, every state and the District of Columbia have their own unique notification rules, thus establishing a labyrinth of compliance procedures.
Although the rule updates were confirmed late last year, legal challenges have already begun and subsequently been consolidated at the Sixth Circuit. Further developments in this area are sure to draw the attention of every legal professional navigating the world of data breach reporting.
For more in-depth analysis, a detailed overview is provided by the full article on the subject matter.