The Federal Trade Commission’s (FTC) chief administrative law judge, Michael Chappell, has ruled the agency can be compelled to disclose the details of the data security standards it uses to pursue enforcement actions against companies that suffer data breaches, Computerworld reports. Chappell ruled Thursday in response to a motion filed by now-defunct medical laboratory LabMD, which accused the FTC of holding it to data security standards that don’t officially exist, that LabMD may not inquire about the FTC’s legal standards or rationale but has the right to know the standards it’s expected to comply with. “The decision is a victory for the many groups that are opposed to the FTC’s pursuit of companies that have suffered data breaches in recent years,” the report states.
Full Story