How to Respond to a Data Breach

Citing recent examples of high-profile data breaches involving Target, Home Depot and TJX Companies (parent company of T.J. Maxx, Marshalls, HomeGoods, Sierra Trading Post), Einstein noted that there's no federal law governing data security. There are 47 individual state laws that retailers need to be in compliance with, and nexus is not a defense. You need to be in compliance with the privacy laws of where your customers live, not just the state where your company is headquartered.