Own Your Data(base)
It's been a terrible month for user data security. Epsilon and Sony, both high-profile and data-rich companies, have been breached and revealed sensitive personal data to hackers. In Sony's case, the 77 million users affected weren't even notified that their names, addresses and potentially credit card data were compromised until six days after the attack. Many speculate that in the rush to get out new product features, Sony neglected to carefully think through their security model for protecting the valuable user data they they stored. Clearly, the current system of data storage and retrieval is broken. As today's New York Times reports, there is currently no U.S. federal law regulating data theft, penalties, and notification requirements, so states are left to determine their own protocols. Companies have little downside to collecting troves of information, since the penalties for losing it are unclear while the benefits to having it are potentially great. Meanwhile, consumers have little or no control over what happens to the increasing amount of personal information that they give or leave as they interact online and in person with well connected businesses.

