Personal Information: Key Federal Privacy Laws Do Not Require Information Resellers to Safeguard All Sensitive Data, Full text GAO-06-674, and Highlights, June 26, 2006.
“The growth of information resellers–companies that collect and resell publicly available and private information on individuals–has raised privacy and security concerns about this industry. These companies collectively maintain large amounts of detailed personal information on nearly all American consumers, and some have experienced security breaches…GAO found that the applicability of the primary federal privacy and data security laws–the Fair Credit Reporting Act (FCRA) and Gramm-Leach-Bliley Act (GLBA)–to information resellers is limited.”
