House Oversight Investigates, Questions FTC Authority; LabMD Case on Hold.

I become nervous when “experts” are unclear what “reasonable” privacy and security practices mean. One expert:

“Reasonable behavior is no more clear to me now than it was 13 years ago,” he said, pointing out that the FTC was investigating a data security case in 2008 but didn’t publish its data security recommendations—Protecting Personal Information: A Guide for Business—until 2011.

Really? You aren’t any clearer today than you were 13 years ago? So you haven’t ready any court cases, books, articles, reports from the FTC, had a chat with fellow experts, or sat down to think for a few minutes?

Also, I love that there was a hearing about FTC privacy and security enforcement, but no one from the FTC was invited. No agenda here, whatsoever. Nope. Not at all. Move along. Nothing to see here.