Companies that fail to take basic steps to secure customer data and maintain a basic level of cybersecurity hygiene for user accounts could fall afoul of a host of regulators, according to a Consumer Finance Protection Bureau circular set to be published Tuesday in the Federal Register.
The circular warns that the Consumer Financial Protection Act’s ban on “unfair acts or practices” could cover poor data stewardship that is “likely” to lead to a breach or other harms.
