A number of federal and state laws have been enacted to protect the privacy of electronic data, including HIPAA, Sarbox, GLBA and the PCI DSS. Do you think these laws are effective in preventing security breaches? Why or why not?
In my view I don't think that these laws are not effective in preventing security breaches due to the below mentioned reasons:
(i) For the term 'security' there is no permanent solution. With stronger encryption techniques and more secured algorithms the hackers and attackers are also getting updated with newer technologies. So, preventing security breaches permanently is always impossible. This is due to the reason of security and attackers are evolving simultaneously.
(ii) The laws like HIPAA, PCI DSS, etc. can increase the system security but they also affect the companies those handles the data and processes the information. When it comes to preventive approaches in order to stop data security breach, there is always scope for further improvement.
Hope this helps.
Get Answers For Free
Most questions answered within 1 hours.