Fortinet's Quade on Fallout From Equifax Data Breach

The video discusses the implications of data breaches for affected individuals and companies, highlighting the importance of due diligence in addressing breaches. It contrasts the European GDPR regulations, which mandate reporting breaches within 72 hours, with the more market-driven approach in the US. The discussion includes the role of government in incentivizing companies to balance convenience, privacy, and security, emphasizing the need for robust systems that provide all three.

What is the primary responsibility of a company after a data breach?

• To ignore the breach and continue operations

• To investigate the breach and cooperate with law enforcement

• To immediately fire the responsible employees

• To sell the stolen data to the highest bidder

What is the GDPR requirement for reporting data breaches in Europe?

• Report within 72 hours

• Report within 24 hours

• Report within one week

• No specific time requirement

How does the US approach to data privacy regulation differ from Europe's?

• The US has stricter regulations than Europe

• The US and Europe have identical approaches

• The US relies more on market forces and public outcry

• The US has no regulations at all

What is the potential fine for massive data breaches under GDPR?

• Up to 1% of global revenue

• Up to 2% of global revenue

• Up to 4% of global revenue

• Up to 10% of global revenue

What should be the focus of government regulation in data privacy?

• Balancing convenience, privacy, and security

• Eliminating privacy concerns entirely

• Prioritizing convenience over privacy and security

• Focusing solely on security