More and more, we are living our lives electronically. Cell phones, tablets, and laptops are common-place. We communicate with each other over texts, emails, and tweets more frequently than face-to-face conversations. Many personal records exist solely in electronic form - from bank statements to medical records. While electronic data storage is certainly convenient and cost-effective, it also exposes us to both the unintentional and malicious disclosure of personal, identifying information.
To date in 2013, there have been 64 privacy breaches in the United States alone. Over 430,000 records were compromised by those breaches.
An Act To Amend the Notice of Risk to Personal Data Act To Further Protect Consumers, proposed by Representative Treat of Hallowell, seeks to protect consumers when privacy breaches occur. It would require a company whose security has been breached to notify affected Mainers within 30 days of the breach.
As sensitive consumer information is increasingly stored electronically, personal data are vulnerable to new kinds of security breaches. Sensitive records are accessed from every-day devices like cell phones and tablets that are easily stolen and often unencrypted. Records are also susceptible to hackers, who are growing more sophisticated and always a step ahead of security measures. As a result, breaches are inevitable. The question is not if a breach will occur, but when.
That's why it is important that companies whose systems have been compromised notify affected consumers immediately so that individuals can take the necessary steps to protect their identities and privacy. We hope the Joint Standing Committee on Insurance and Financial Services will protect Mainers by supporting LD 158.