For Immediate Release: November 5, 2009

Electronics Industry Lawsuit Attacks States’ Rights
State and Local Governments call on Industry to Withdraw New York City E-waste Lawsuit

(San Francisco, CA – November 5, 2009)  Government officials from across the country today called on the electronics industry to withdraw its lawsuit against the New York City e-waste recycling law, calling the lawsuit a challenge by the electronics industry to the rights of states and cities to pass producer responsibility laws that hold manufacturers accountable for their products.

In a letter to the Consumer Electronics Association (CEA) and the Information Technology Industry Council (ITIC), who filed the lawsuit, state and local government representatives from 18 states expressed their continued support for state and local laws that give the electronics manufacturers responsibility for financing effective takeback services for all the products they are selling in those states.

“This lawsuit isn’t really about the New York City e-waste law,” said Wisconsin State Senator Mark Miller, sponsor of Wisconsin’s new e-waste law, which passed two weeks ago. “This is really about the rights of states and cities to say that the manufacturers of toxic products need to be responsible for their products when consumers are ready to discard them. The outcome of this case could impact producer responsibility laws in all of our states, on a whole host of products.”

Full Article: 

http://www.computertakeback.com/media/press_releases_governments_challenge_CEA_ITI.htm

Bookmark It

Hide Sites

Wednesday, June 03, 2009 10:23 AM/EST

Information security managers and executives have long been held accountable for security incidences and breaches, but what about the people who certify or provide the security? In other words, should auditors and managed security service providers be held accountable for breaches that happen after they’ve signed off on security measures?

That is the question before the courts in the case of the 2005 breach of CardSystems, a credit card payment processor that suffered a theft of more than 40 million credit card numbers, according to a Wired.com report. CardSystems has been certified as compliant with Cardholder Information Security Program (CISP), the precursor to the Payment Card Industry Data Security Standard (PCI DSS). But an incident response analysis discovered that CardSystems wasn’t in compliance with the security standards at the time of the breach.

According to the Wired report, a lawsuit brought by Merrick Bank is moving forward against Savvis, the managed service provider that certified CardSystems as CISP compliant. The lawsuit alleges that Savvis was negligent in certifying CardSystems as secure and bears responsibility. Savvis is a partner of such vendors as Cisco, Microsoft and Hewlett-Packard.

To read the entire article, posted by Larry Walsh on June 3, 2009 10:23 AM, follow the link (below).

http://blogs.channelinsider.com/secure_channel/content/data_security/breach_lawsuit_could_reset_security_liabilities_to_service_providers.html

Bookmark It

Hide Sites