As lawmakers tackle protecting consumers’ data, many often turn to the requirement for “reasonable security,” which usually can be a vague threshold for private industry to meet. But plaintiff and defense attorneys agree, offering a more granular definition of reasonable security can also risk being overly proscriptive and easily outdated.
For instance, a recently proposed federal law, written by the bicameral and bipartisan Cyberspace Solarium Commission, risks inching toward being overly restrictive while too vague for compliance for many, defense attorneys said.
