A senior SEC enforcement official said companies withholding
information about data breaches could face civil and criminal
enforcement actions. The SEC is looking to crack down on companies
that don't disclose a breach when they become aware it has
occurred. Speaking as part of a Practicing Law Institute panel,
Stephanie Avakian, deputy director for the SEC's enforcement
division, said that while the agency would weigh the challenges
created by the variety of variables associated with a data breach,
the enforcement division will take action where it judges companies
violated their duties.
Link To Article
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.