Court questions FTC on possible cybersecurity rulemaking

Circuit judges queried the Federal Trade Commission about pursuing a rulemaking to set cybersecurity requirements in a case involving a medical testing laboratory, with commission lawyers arguing that developing such regulations would be difficult because privacy and security requirements need to be established on a case-by-case basis.

“The commission has determined that in the case of data security and privacy that rulemaking isn't really an effective way to proceed for a number reasons,” said FTC attorney Michael Hoffman, in response...