Friday, November 12, 2021

If this passes, what will it do to security budgets?

https://threatpost.com/congress-ban-ransomware-payouts/176213/

Congress Mulls Ban on Big Ransom Payouts Unless Victims Get Official Say-So

A U.S. lawmaker has introduced a bill – the Ransomware and Financial Stability Act (H.R.5936) (PDF ) – that would make it illegal for financial firms to pay ransoms over $100,000 without first getting the government’s permission.

The legislation was introduced on Wednesday by the top Republican on the House Financial Services Committee, North Carolina Congressman Patrick McHenry.



A common tech law complaint.

https://www.wired.com/story/company-tapped-ai-website-landed-court/

This Company Tapped AI for Its Website—and Landed in Court

Last year, Anthony Murphy, a visually impaired man who lives in Erie, Pennsylvania, visited the website of eyewear retailer Eyebobs using screen reader software. Its synthesized voice attempted to read out the page’s content, as well as navigation buttons and menus. Eyebobs used artificial intelligence software from Israeli startup AccessiBe that promised to make its site easier for people with disabilities to use. But Murphy found it made it harder.

AccessiBe says it can simplify the work of making websites accessible to people with impaired vision or other challenges by “replacing a costly, manual process with an automated, state-of-the-art AI technology.” In a lawsuit filed against Eyebobs in January, Murphy alleged that the retailer failed to provide people using screen readers equal access to its services and that the technology from AccessiBe—not party to the suit—doesn’t work as advertised.

… The lawsuit against Eyebobs is among a growing number in recent years accusing companies of breaching web accessibility standards. Offers to fix websites with AI technology have grown too, along with complaints from some accessibility advocates that it doesn’t work as advertised.

The case also provides a rare example of a company facing legal consequences for betting on AI technology that didn’t perform as hoped.


(Related) More “Computer Law” concerns.

https://www.cpomagazine.com/cyber-security/protecting-your-enterprise-against-a-ransomware-related-class-action-lawsuit/

Protecting Your Enterprise Against a Ransomware-Related Class Action Lawsuit

If your company becomes the victim of a ransomware attack, you might assume the attack itself is the worst of your organizational and financial problems. have you considered the possibility that your enterprise could additionally face a class action lawsuit after experiencing a ransomware attack?

These days, that risk is increasing—and it is definitely on the radar of legal professionals. But enterprises that prepare in advance for such a worst-case scenario can protect themselves from this extra layer of financial hardship. The fact is that it will be difficult for the plaintiff in a class-action lawsuit to win a settlement if the company that was targeted was careful, attentive, and conscientious – taking every precaution it could reasonably take to prevent and recover from an attack. An organization’s risk increases, however, if the enterprise in question was negligent with personal data that was compromised, and it can be proven in court.



Is it the data you hold or what you do with that data?

https://dilbert.com/strip/2021-11-12


No comments: