Follow up to March 27, 2008 posting, FTC Announces Settlement of Action Against Data Brokers Reed Elsevier and Seisint for Failing to Provide Adequate Security for Consumers’ Data, this August 1, 2008 FTC news release: “Following a public comment period, the Commission has approved the issuance of a final consent order and authorized the staff to respond to the commenters of record In The Matter of The TJX Companies, Inc…[and] In The Matter of Reed Elsevier Inc. and Seisint, Inc.”

Related from EPIC: “The settlements arose from data breaches, which exposed the sensitive personal information of over 500,000 consumers and resulted in millions of dollars in financial fraud. Earlier this year, EPIC filed comments with the FTC urging the Commission to include civil penalties in the settlements. EPIC wrote that civil penalties are necessary to provide incentives for companies to safeguard personal data. EPIC also noted that the FTC imposed $10 million in civil penalties in the Choicepoint case. The final agreements impose security and audit responsibilities, but no financial penalties.”