WASHINGTON — A Target executive told a Congressional panel Wednesday that a national federal breach-notification standard would be better than a patchwork of state laws that retailers must meet when data security breaches are discovered and consumer financial and personal data are compromised.
Target Corp. and Neiman Marcus Group executives testified before a House Energy and Commerce subcommittee on cyber crime and consumer data protection — marking the second hearing in two days — as lawmakers in both chambers explore ways to craft legislation to combat cyber crime and develop national standards and a uniform data-breach notification requirement.
Illinois Attorney General Lisa Madigan criticized the security systems of U.S. companies and their ability to protect consumer data in her testimony before the panel, and noted that her office has joined that of Connecticut Attorney General George Jepsen in launching a multistate investigation into the data breaches at Target, Neiman Marcus and Michaels Stores.
Lawmakers are probing how the data security breaches at Target and Neiman Marcus happened, whether the companies notified the public quickly enough about compromised personal information and payment cards, and whether federal legislation should be devised to create national standards and strengthen enforcement of data security breaches in the private sector.
Rep. Gus Bilirakis (R-Fla.) asked executives from both retailers whether they supported a national standard on security-breach notification, which was at the heart of the two days of Congressional hearings.
“Given that [46 states and the District of Columbia] in the U.S. and its territories have developed data-breach notification laws with different requirements — standards of harm and definitions of personally identifiable information — do you or your companies find it difficult to navigate through very different standards?” Bilirakis asked.
“It’s my understanding the majority of the [state] statutes provide for broad public disclosure and we provided broad public disclosure on Dec. 19,” said John J. Mulligan, Target’s executive vice president and chief financial officer, noting that the company disclosed the breach in major newspapers and also provided notices via e-mail to 17 million of its customers.
Target reported the breach in December, which it initially said affected 40 million consumers who purchased goods in stores and potentially had their debit and credit card information stolen. The retailer later said another 70 million consumers may have had personal data such as their names, addresses, e-mail addresses and phone numbers stolen.
“Certainly one standard would be easier to follow than 47, but we complied with all 47 state statutes,” Mulligan said.
Michael R. Kingston, senior vice president and chief information officer at Neiman Marcus, said he didn’t have an “opinion” on a national standard but warned that any legislation should be “flexible” as merchants try to defend against highly sophisticated malware attacks.
“I would say that it’s important there be flexibility with whatever [legislative] standards we have because I do think these investigations, these events are different and on a case-by-case basis need to be handled differently,” he said.
Neiman Marcus Group Ltd. LLC disclosed its data security breach on Jan. 10, reporting that 1.1 million payment cards may have been compromised.
The National Retail Federation has said it supports a uniform federal breach notification law that preempts the current state laws.
“There is currently no comprehensive federal law that requires companies to protect consumer or user data,” said Rep. Jan Schakowsky (D-Ill.). “Nor is there a federal requirement that companies inform their customers in the event of a data breach.…I believe it is critical that this subcommittee move forward with legislation that will ensure that best practices are followed at all retailers and that consumers are informed as soon as possible after cyber theft is discovered.
Rep. Lee Terry (R-Neb.), chairman of the Subcommittee on Commerce, Manufacturing and Trade, said he is working on legislation that would “foster quicker notification [by businesses] by replacing the multiple — and sometimes conflicting — state notification regimes with a single, uniform federal breach-notification regime.”
Edith Ramirez, chairwoman of the Federal Trade Commission, testified that the FTC wants legislation that strengthens its existing authority over data security standards, gives the FTC the ability to seek civil penalties to deter unlawful conduct and requires companies to provide notification to consumers when there is a security breach.
“Never has the need for legislation been greater,” she said. “With reports of data breaches on the rise, and with a significant number of Americans suffering from identity theft, Congress needs to act.”
There'll be no rest for those headed to Europe for men's, as Paris just closed the gap with Milan. According to a provisional calendar released by the Chambre Syndicale, Paris Men's Week will now open a day earlier on January 16. See new highlights on the official lineup on WWD.com. #wwdnews #wwdfashion (📷: @kukukuba)
BREAKING: Jonathan Saunders is leaving @DVF. The designer has resigned from his position as chief creative officer of Diane von Furstenberg, the company said in a statement on Friday. At the time of his hire, von Furstenberg said Saunders’ arrival symbolized and facilitated her stepping back from the day-to-day duties that occupy the work of a full-time creative director. The British designer joined DVF in May 2016 and was in charge of all product categories. #wwdnews
For @versace_official’s spring ad campaign, the brand emphasized the archival prints from the spring tribute collection dedicated to the late Gianni Versace. Closing out the show were five of Gianni’s favorite models: Cindy, Naomi, Carla, Helena, and Claudia. Bowing on December 18, the new campaign is yet another tribute to supermodel-dom as the images by Steven Meisel are fronted by @iamnaomicampbell, @cturlington, @gisele and more. #wwdfashion
Four-time Oscar-nominated actress Annette Bening has been waiting 20 years to play Gloria Graham in "Film Stars Don't Die in Liverpool," which will be released on December 29. The movie about Graham – a Hollywood star known for her controversial relationship with a younger Englishman named Peter Turner – is based off a memoir Turned wrote. "She felt vulnerable to him, because she loved him, she really did love him. And anyone that we really truly are in love with, we re vulnerable to in a very deep way," said Bening. Read our full interview with the modern icon of an actress on WWD.com. #wwdeye (📷: @ninebagatelles; Styled by @cristinaehrlich)
The crisp white button down: a staple that can be dressed up or down and accessorized throughout the decades. Here, on a Art Basel-goer in 2017 on the left and on the iconic Audrey Hepburn in “Roman Holiday” in 1953 on the right. #tbt #wwdfashion (📷: Andrew Morales)
Known for her work with @victoriassecret, 25-year-old model @georgiafowler is raising her profile in Hollywood. Fowler stars in @vincecamuto’s holiday campaign, which launched in partnership with “Pitch Perfect 3.” “Almost every shoot with Vince Camuto, I’ve had to face a fear…It was definitely a challenge. I’m so grateful for it, though. I’ve always wanted to be a pop star, so that was the perfect chance,” Fowler said. Head to WWD.com to read about Fowler’s experience modeling, including at the #VSFashionShow, and her relationship with Nick Jonas. #wwdeye (📷: @jilliansollazzo)
EXCLUSIVE: Huda Kattan just became the first beauty influencer to land a major beauty deal. Kattan's business, @hudabeauty, has received a minority investment from private equity firm TSG Consumer Partners. The brand, which industry sources say is on track to do $200 million in retail sales for 2017, will receive support on product, retail and geographic expansion through the deal. Get all the details on the deal and read @_a_collins' interview with Kattan on WWD.com. Link in bio. (📷: @jgreenery) #wwdbeauty #wwdnews
Peruvian model @juanaburga_official – who is known for walking the runways of @rodarte, @viviennewestwood and @torybuch – is making the move to the big screen with drama “Los Últimos.” The film premiered in Argentina in November and arrives in the U.S. and Europe in 2018. On making the switch from modeling to acting, Burga told WWD: “It’s a completely different thing – a lot of people think it’s similar or try to connect things, especially like getting used to the camera or being looked at all the time or playing these different characrers, but film is a completely different story.” #wwdeye (📷: @jgreenery)
London’s newly opened @designmuseum will look back on the life and work of Azzedine Alaïa in a show that the designer helped to curate before he died of heart failure last month. The retrospective, which Alaïa had worked on with Mark Wilson, chief curator of the @groningermuseum, will look at the impact of his work worldwide. The show, “Azzedine Alaïa: The Couturier,” will run from May 10 to October 7. Read more about the exhibit on WWD.com #wwdnews #wwdfashion (📷: @zefashioninsider)