FTC Consumer Protection Chief Offers Case for Data Breach Fining Authority

Civil penalty authority could encourage companies to take data security seriously, an incentive to increase investment, said FTC Consumer Protection Bureau Director Andrew Smith Friday at a Free State Foundation event. He was asked about the agency’s recent no-fine settlement with Uber (see 1810260040). It’s very difficult to show the “causal link” between a security breach and harm to consumers, he said, but some commissioners believe there’s a “systemic underinvestment” in data security.