The Federal Trade Commission seeks public comments on its proposal to modify an approach for disclosing Privacy Act records in the event of a breach to aid incident response and remedial efforts.
FTC said Wednesday it adopted a “routine use” in 2007 based on a model language recommendation from the Justice Department allowing the commission disclose records to appropriate entities and people in order to address data breaches.
A notice posted in the Federal Register states the commission seeks to amend its system of records notices in an effort to clarify that the concept is not limited to identity theft and financial or property damage.
The commission also proposed a second routine use to share information with another federal agency if the data being requested is “reasonably” necessary for breach response.
FTC will accept feedback over a 30-day period.