The San Jose Mercury Post, in their second editorial on the issue ID theft in recent months, talks about why VA Secretary Jim Nicholson is “mad as hell” about the recent VA data breach, and what should be done about it. Their top to suggestions: better federal data breach laws and better federal credit freeze laws. Their assessment of the current state of affairs in Congress, specially HR 3997:
The bill, which came out of the House Financial Services Committee, requires companies to notify consumers of a data breach, but only if they believe the breach puts customers at risk of identity theft. That’s simply a license for companies who don’t want bad publicity to sweep a data breach under the rug. And the bill would make credit freezes available only to those who have already been victims of identity theft. As one consumer group put it, “That’s like saying you can’t wear a seat belt unless you’ve already been in an accident.” Since the bill pre-empts stronger state laws, it would do more harm than good.