Two U.S. senators recently proposed a cybersecurity legislation that will allow the FTC to penalize credit rating industry organizations that dont properly safeguard data. Credit rating agencies would receive $100 fines for each piece of personally identifiable information (PII) lost in a data breach, plus $50 for each additional PII file per customer. The bill also requires agencies that fail to comply to pay a maximum penalty of 50 percent their gross revenue from the year before the incident took place. 50 percent of the fines collected by the FTC would go to the victims.”]

