Inside Regulators’ View of ‘Reasonable Security’

Inside Regulators’ View of ‘Reasonable Security’

State laws and the FTC require companies to implement “reasonable security,” but definitions remain frustratingly vague. FTI Consulting’s Ryan Smyth and BakerHostetler’s Joe Bruemmer break down how recent regulatory actions and guidance are helping to clarify these expectations.  Many U.S. states and territories have laws that require organizations to maintain “reasonable security” to protect personal information. The FTC has expressed a similar…