The FTC and “Reasonable” Data Security

In a long-awaited decision this week, the U.S. Court of Appeals for the critical Third Circuit resoundingly affirmed the FTC’s authority to hold companies responsible for maintaining “reasonable data security.”  Neither the court nor the FTC, however, provided any clues about what this term means, in terms of specific guidelines. The liability of not having[…]