SECURING FIBRE CHANNEL FABRICS - Brocade

Breach Disclosure LawsThe precedent-setting law was the California Senate Bill (SB) 1386which came into effect on July 1, 2003, as a result of a security breachof California's state website in 2002.California SB 1386 states that:1. Any agency that owns or licenses computerized data that includespersonal information;2. shall disclose any breach of the security of the system followingdiscovery or notification of the breach in the security of the data;3. to any resident of California whose unencrypted personal informationwas, or is reasonably believed to have been, acquired by anunauthorized person.California SB 1386 was not perfect, so it was necessary to expand itsscope to impose a general security standard on businesses that maintaincertain types of personal information about California residents.California Assembly Bill (AB) 1950 came into effect in January 2005and also requires businesses, and their subcontractors, to maintain“reasonable security procedures and practices.”At the time of writing, there are 46 US states that have implementedbreach disclosure laws. The National Conference of State Legislatures(NCSL) website (http://www.ncsl.org/default.aspx?tabid=13489) containsa list of all US states with breach disclosure laws, along withreferences to them.Other similar breach disclosure laws have been enacted in other countriesincluding:• Canada. Personal Information Protection and Electronic DocumentsAct (PIPEDA)• UK. Data Protection Act (DPA)• EU. EU Data Protection Directive (Directive 95/46/EC) and Basel II• Japan. Personal Information Protection Law (PIPL)• Australia. Commonwealth Privacy Act (CPA)The following website provides a list of international privacy laws:http://www.informationshield.com/intprivacylaws.html.Securing Fibre Channel Fabrics 159