In the weeks following news of Equifax's data breach, Congress introduced bills to address data security, credit bureau procedures, and data breach notifications. However, all the focus on the breach did not result in legislation dealing with how personal data and how breaches are handled.

Despite the lack of legislation after the Equifax breach, Ballard Spahr Partner Ed McAndrew said the breach "did not precipitate the enactment of a federal data breach notification law."

The only reforms that were made were three discrete measures in the Senate's regulatory relief law. But some remain optimistic that Congress can and will strengthen consumer protections in wake of the breach.

Read the full article here. Subscription may be required.