# Data Security - What are the Responsibilities?

**URL:** <https://boards.straightdope.com/t/data-security-what-are-the-responsibilities/300129>\
**Category:** Factual Questions\
**Created:** [April 19, 2005, 9:05pm UTC](https://boards.straightdope.com/t/data-security-what-are-the-responsibilities/300129 "2005-04-19T21:05:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ike\_Witt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ike_witt/32/283_2.png) [@Ike\_Witt](https://boards.straightdope.com/u/Ike_Witt)\
**Post date:** [April 19, 2005, 9:05pm UTC](https://boards.straightdope.com/t/data-security-what-are-the-responsibilities/300129/1 "2005-04-19T21:05:01Z")

</div>

It seems like just about every week there is something in the news about a company that has had its records hacked and data on individuals stolen. Recent stories include [LexisNexis theft much worse than thought](http://msnbc.msn.com/id/7475594/) and [Ameritrade warns 200,000 clients of lost data](http://www.msnbc.msn.com/id/7561268/).

What responsibility does Ameritrade or LexisNexis have to protect their client information? Are the companies liable for any losses incurred by people who have had their information stolen? I see that there is a class action lawsuit forming against LexisNexis, can people who were not harmed by the data theft really expect some sort of compensation?

Considering that people are not going to stop stealing things, do laws adequately protect consumers?

---

<div class="post-metadata">

**Author:** ![Ike\_Witt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ike_witt/32/283_2.png) [@Ike\_Witt](https://boards.straightdope.com/u/Ike_Witt)\
**Post date:** [April 20, 2005, 2:58pm UTC](https://boards.straightdope.com/t/data-security-what-are-the-responsibilities/300129/2 "2005-04-20T14:58:56Z")

</div>

Can I have a mod move this to GQ please?

---

<div class="post-metadata">

**Author:** ![SkipMagic](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skipmagic/32/20706_2.png) [@SkipMagic](https://boards.straightdope.com/u/SkipMagic)\
**Post date:** [April 20, 2005, 6:48pm UTC](https://boards.straightdope.com/t/data-security-what-are-the-responsibilities/300129/3 "2005-04-20T18:48:26Z")

</div>

Moved to **GQ** at the request of the OP.

- SkipMagic  
Wandering MPSIMS Moderator

---

<div class="post-metadata">

**Author:** ![ouryL](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ouryl/32/6067_2.png) [@ouryL](https://boards.straightdope.com/u/ouryL)\
**Post date:** [April 20, 2005, 8:27pm UTC](https://boards.straightdope.com/t/data-security-what-are-the-responsibilities/300129/4 "2005-04-20T20:27:35Z")

</div>

> [@adam yax](#):
>
> It seems like just about every week there is something in the news about a company that has had its records hacked and data on individuals stolen. Recent stories include [LexisNexis theft much worse than thought](http://msnbc.msn.com/id/7475594/) and [Ameritrade warns 200,000 clients of lost data](http://www.msnbc.msn.com/id/7561268/).
> 
> What responsibility does Ameritrade or LexisNexis have to protect their client information? Are the companies liable for any losses incurred by people who have had their information stolen? I see that there is a class action lawsuit forming against LexisNexis, can people who were not harmed by the data theft really expect some sort of compensation?
> 
> Considering that people are not going to stop stealing things, do laws adequately protect consumers?

Laws do not protect as much as punish. Once the birds are out of the cage, there is no easy way to get them back in. One cannot unbreak an egg.