Data Resellers Liable for Downstream Security Failures
Of course, no legitimate business would put out a welcome mat for crooks. But as the FTC’s data security cases make clear, that’s the effect when companies fail to take reasonable steps to secure sensitive information in their possession — or data they allow others to access. Three recent settlements with companies that resell credit reports illustrate that point. The companies contract with the nationwide credit reporting agencies to assemble...