Potential role of regulation shadows work on privacy, other cyber policy areas

Government-industry collaboration – rather than compulsory regulation – has underpinned U.S. cybersecurity policy since President Obama's second term, but a variety of ongoing policy deliberations reveal just how fine the line is between regulatory and voluntary approaches to cyber.

The National Institute of Standards and Technology's privacy workshop in Boise, ID, this week was one of the summer's premier venues for government-private sector engagement on cyber-related issues, and regulatory and legal requirements were a prominent feature of the discussions.

NIST,...